protected void updateAmsConfigs() throws AmbariException {
    AmbariManagementController ambariManagementController = injector.getInstance(AmbariManagementController.class);
    Clusters clusters = ambariManagementController.getClusters();
    if (clusters != null) {
      Map<String, Cluster> clusterMap = getCheckedClusterMap(clusters);
      if (clusterMap != null && !clusterMap.isEmpty()) {
        for (final Cluster cluster : clusterMap.values()) {


          Config amsSslClient = cluster.getDesiredConfigByType(AMS_SSL_CLIENT);
          if (amsSslClient != null) {
            Map<String, String> amsSslClientProperties = amsSslClient.getProperties();

            if (amsSslClientProperties.containsKey(METRIC_TRUSTSTORE_ALIAS)) {
              LOG.info("Removing " + METRIC_TRUSTSTORE_ALIAS + " from " + AMS_SSL_CLIENT);
              removeConfigurationPropertiesFromCluster(cluster, AMS_SSL_CLIENT, Collections.singleton(METRIC_TRUSTSTORE_ALIAS));
            }

          }
        }
      }
    }
  }
Updates YARN's NM 'llap_zk_hive' kerberos descriptor as reference and the associated config
hive-interactive-site/hive.llap.zk.sm.keytab.file
ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog260.java