Add keytab support for SPNEGO apps
- Dominant language
- Go
- Stars
- 133
- Forks
- 34
- PR merge metrics
- No merged PRs in 30d
Description
As per this [discussion](https://github.com/aws/credentials-fetcher/discussions/38), add keytab support.
It looks possible to extend credentials-fetcher to manipulate keytab files.
Keytab files can be shared with containers just like Kerberos tickets are being shared as of now.
This can be done with non-gMSA accounts as well, as long as password expiry interval is known.
If the password expiry interval is longer than keytab file refresh, this would work fine.
Contributor guide
Research direction
Start by reading the existing gMSA credential retrieval and Kerberos ticket refresh paths, then review discussion 38 for the proposed keytab approach. Done means credentials-fetcher supports refreshing keytab files for SPNEGO applications, including container sharing and the stated non-gMSA password-expiry case.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100