prole/deploy/opentofu/k3s/manifests/openbao/kerberos-configmap.yaml
chrisfu f47c18fef7 feat(infrastructure): enhance k3s automation and OpenTofu integration
- Infrastructure:
    - Updated k3s Ansible role with mountpoint preflight checks and better permission management.
    - Automated deployment of prole configuration and port-forwarding scripts to cluster hosts.
    - Added systemd service for managing port forwards on k3s nodes.
    - Added prole-installer service account token automation.
- K8s Manifests:
    - Renamed and added Persistent Volumes in iscsi-pvs.yaml (including OpenBao support).
    - Updated StatefulSets for garage and openbao.
    - Migrated prole-db to CloudNativePG-based configuration.
    - Added comprehensive OpenTofu manifests for cluster deployment.
- Configuration:
    - Added cluster-specific configurations (k3d, k3s-hosts).
    - Added PostgreSQL configuration templates.
    - Updated .gitignore to track the conf/ directory.
- Tools:
    - Updated install.py and port-forwarding scripts.
    - Added render_manifest.py for manifest generation.
2026-02-07 22:53:18 -08:00

22 lines
417 B
YAML

apiVersion: v1
kind: ConfigMap
metadata:
name: prole-krb5-conf
namespace: prole-chrisfu-abracadabra
data:
krb5.conf: |
[libdefaults]
default_realm = PROLE.ORG
dns_lookup_realm = true
dns_lookup_kdc = true
[realms]
PROLE.ORG = {
kdc = kdc.prole.org
admin_server = kdc.prole.org
}
[domain_realm]
.prole.org = PROLE.ORG
prole.org = PROLE.ORG