apiVersion: v1
kind: ConfigMap
metadata:
  name: krb5
data:
  krb5.conf: |
    [logging]
    default = FILE:/var/log/krb5libs.log
    kdc = FILE:/var/log/krb5kdc.log
    admin_server = FILE:/var/log/kadmind.log

    [libdefaults]
    dns_lookup_realm = false
    ticket_lifetime = 24h
    forwardable = true
    rdns = false
    default_realm = CLUSTER.LOCAL

    [realms]
    CLUSTER.LOCAL = {
      kdc = kerberos.hdfs-kerberos.svc.cluster.local
      admin_server = kerberos.hdfs-kerberos.svc.cluster.local
    }

    [domain_realm]
    .cluster.local = CLUSTER.LOCAL
    cluster.local = CLUSTER.LOCAL
