apiVersion: v1
kind: ConfigMap
metadata:
  name: knoe-auth-kerberos
data:
  # Kerberos HTTP service principal for SPNEGO (must match keytab)
  servicePrincipal: "HTTP/api.knoe.org@PROLE.LOCAL"
  realm: "PROLE.LOCAL"