Skip to content

Kerberos keytab provisioning #4

New issue
New issue
Closed
Closed
Kerberos keytab provisioning#4
Assignees
nightkrsbernauer
Labels
priority/highrelease-noteDenotes a PR that will be considered when it comes time to generate release notes.release/23.4.0type/feature-new

Description

@nightkr
nightkr
opened on Nov 25, 2021

The operator should (optionally) be able to provision Kerberos keytabs dynamically from the KDC, rather than reading them from static secrets.

Acceptance criteria:

  • Backend/type configuration - Type configuration #8
  • Load admin keytab and KDC mapping
  • Create pod keytab for a given scope (node FQDN, pod FQDN, etc) on demand

Activity

  1. fhennig commented on Dec 1, 2021

    @fhennig
    fhennig
    on Dec 1, 2021
    Contributor

    There seems to be at least some crate to work with kerberos in rust (haven't looked into it much): https://docs.rs/kerbeiros/latest/kerbeiros/

    EDIT: Or maybe this: https://github.com/ironthree/libkrb5-rs

    But maybe we'll just have to write code ourselves to communicate with the kerberos server

  2. nightkr
    self-assigned this
    on Mar 23, 2022
  3. nightkr
    linked a pull request that will close this issue[Merged by Bors] - Kerberos keytab backend #99on Apr 1, 2022
  4. lfrancke
    added this to Stackable Engineeringon Aug 12, 2022
  5. lfrancke
    moved this to Idea/Proposal in Stackable Engineeringon Aug 12, 2022
  6. nightkr
    added
    type/enhancement
    on Aug 15, 2022
  7. lfrancke
    removed
    type/enhancement
    on Aug 31, 2022
  8. lfrancke
    removed this from Stackable Engineeringon Nov 2, 2022
  9. lfrancke
    added this to Stackable Engineeringon Dec 19, 2022
  10. lfrancke
    moved this to Next in Stackable Engineeringon Dec 19, 2022
  11. lfrancke
    added
    type/feature-new
    priority/high
    on Jan 27, 2023
  12. nightkr
    moved this from Next to Development: In Progress in Stackable Engineeringon Feb 13, 2023
  13. sbernauer
    moved this from Development: In Progress to Development: Waiting for Review in Stackable Engineeringon Mar 8, 2023
  14. sbernauer
    moved this from Development: Waiting for Review to Development: In Review in Stackable Engineeringon Mar 10, 2023
  15. sbernauer
    self-assigned this
    on Mar 10, 2023
  16. sbernauer
    moved this from Development: In Review to Development: Done in Stackable Engineeringon Mar 15, 2023
  17. sbernauer
    closed this as completedon Mar 15, 2023
  18. lfrancke
    added
    release-noteDenotes a PR that will be considered when it comes time to generate release notes.
    release/23.4.0
    on Mar 22, 2023
  19. lfrancke
    moved this from Development: Done to Done in Stackable Engineeringon Mar 22, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

priority/highrelease-noteDenotes a PR that will be considered when it comes time to generate release notes.release/23.4.0type/feature-new

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions