Date: 2026-02-02
Configured NFSv4 Kerberos client to use gssproxy for per-UID credential initiation and validated access using the k8s-nfs-access identity.
gssproxy./etc/idmapd.conf domain to auth.home.lan.k8s-nfs-access is present at /etc/krb5.keytabs/k8s-nfs-access.keytab./etc/gssproxy/99-nfs-client.conf with per-UID caches: /var/lib/gssproxy/clients/krb5cc_nfs_%U./etc/nfs.conf:
use-gss-proxy = 1keytab-file = /etc/krb5.keytab/var/lib/nfs/rpc_pipefs.gssproxy and rpc-gssd./mnt/bigdata and /mnt/fastdata with sec=krb5p.runAsUser: 1240000012, runAsGroup/fsGroup: 1240000009 succeeded (read + write).debug = false.