apiVersion: v1
kind: ConfigMap
metadata:
  name: prole-auth-kerberos
data:
  # Kerberos HTTP service principal for SPNEGO (must match keytab)
  servicePrincipal: "HTTP/api.prole.org@PROLE.ORG"