dask / dask/dask-gateway

Kerberos authentication on dask gateway deployed on AKS

Open
#402 2 comments 0 reactions 0 assignees View on GitHub
bug codebase:helm-chart
Dominant language
Python
Stars
148
Forks
93
PR merge metrics
No merged PRs in 30d

Description

Is it possible to use Kerberos authentication on a dask gateway deployed on AKS? The documentation says that the FQDN is the fully qualified domain name of the host running dask-gateway-server. But when deployed on AKS, the FQDN can change. What FQDN should we use in that scenario?

```bash
# Create the HTTP principal (if not already created)
$ kadmin -q "addprinc -randkey HTTP/FQDN"

# Create a keytab
$ kadmin -q "xst -norandkey -k /etc/dask-gateway/http.keytab HTTP/FQDN"
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.