[QUESTION] CSI Driver with kerberized hdfs

[kyungwan-nam]

Question

Before asking a question, make sure you have:

• Reviewed relevant Kubernetes information: Google your error messages and look at K8s docs.
• Searched open and closed GitHub issues
• Read the documentation: JuiceFS CSI Driver Doc

What help did you want:

I'm trying to JuiceFS CSI Driver with kerberized hdfs.
in my understanding, It requires kinit first, then JuiceFS authenticate using KRB5CCNAME.
but, I couldn't figure out how to do that under CSI Driver.
Could you help me? Thanks.

Environment:

• JuiceFS CSI Driver version (which image tag did your CSI Driver use): juicedata/juicefs-csi-driver:v0.18.0
• Kubernetes version (e.g. kubectl version): v1.19.9
• Object storage (cloud provider and region): hdfs
• Metadata engine info (version, cloud provider managed or self maintained):
• Network connectivity (JuiceFS to metadata engine, JuiceFS to object storage):
• Others:

[tangyoupeng]

Did you mean use HDFS as storage backend? You can try kinit in local machine and add generated ccache file to pod.
https://juicefs.com/docs/csi/guide/pv/#mount-pod-extra-files

[kyungwan-nam]

@tangyoupeng
Thanks to your advice I did it! Thank you for letting me know

I have another question.
generated ccache file would be expired at the end.
so, I have to update ccache secret whenever accessing juicefs.
Isn't there any way to authenticate using my keytab file instead of ccache file?

[zwwhdls]

closed by juicedata/juicefs#3517