prole/k8s/openbao/kerberos-configmap.yaml
chrisfu 15890187a3 Stabilize CNPG reset/update flow and finalize 3-node recovery
- add idempotent CNPG operator reconciliation to prevent duplicate active controller ReplicaSets
- restore and validate CNPG 3-instance convergence with PV claimRef recovery and storage path readiness
- wire canonical launcher aliases/reset behavior and improve namespace cleanup semantics
- harden backup/objectstore readiness handling and retry behavior
- enforce service namespace usage for common services and remove default-namespace drift
- enable Kerberos milestone auto-activation when realm/kdc are configured and apply CNPG GSS pg_hba rules
- keep final runtime healthy: knoe-db 3/3, operator stable, perfsnap captured

Co-authored-by: Junie <junie@jetbrains.com>
2026-03-27 21:54:53 -07:00

22 lines
393 B
YAML

apiVersion: v1
kind: ConfigMap
metadata:
name: prole-krb5-conf
namespace: knoe-system
data:
krb5.conf: |
[libdefaults]
default_realm = PROLE.ORG
dns_lookup_realm = true
dns_lookup_kdc = true
[realms]
PROLE.ORG = {
kdc = 10.0.0.3
admin_server = 10.0.0.3
}
[domain_realm]
.prole.org = PROLE.ORG
prole.org = PROLE.ORG