[libdefaults]
  default_realm = KNOE.LOCAL
  rdns = false
  forwardable = true
  udp_preference_limit = 1   # force TCP — workaround for kubectl port-forward UDP flakiness on macOS

[realms]
  KNOE.LOCAL = {
    kdc = localhost:88
    admin_server = localhost:749
    default_domain = local
  }

[domain_realm]
  .local = KNOE.LOCAL
  localhost = KNOE.LOCAL