Epic Goal

• Provide documentation to customer so that their can run pods with NFS kerberos on top of OCP
• This epic is not about implementing native NFS kerberos into OCP but rather explaining what custom integration steps are required to run pods with NFS kerberos.

Why is this important?

• Security focused customers are asking for NFS kerberos support
• Designing, implementing and supporting a native / generic kerberos solution is very challenging however as of today it is possible to achieve it if the customer implements the ticket's distribution / access /refresh.
• In the meantime, we can offer an alternative customer for whom NFS kerberos is a must have giving more time and less pressure for a potential native integration.

Scenarios

1. ...

Acceptance Criteria

• Need to decide how to publish this
• Need to define if this will require a support exception

Dependencies (internal and external)

1. ...

Previous Work (Optional):

1. https://docs.google.com/document/d/1Z1yh-3v6v6vQA8s_gXedFwVX9qGlOC1AlpRzPcDFeu4/edit?usp=sharing
2. https://docs.google.com/presentation/d/1gP4AUogtAVRdnxf9TMFW2caAU6MqileU-ZoN0w2j9DI/edit?usp=sharing

Open questions::

1. …