feat: update Kerberos image and enhance configuration handling

- Switched Kerberos image to `ghcr.io/openprojectx/directory-kerby/kerby-kdc:latest`.
- Added `writeContainerKerberosConf` for improved container Kerberos configuration management.
- Refactored `kerberosConf` generation into reusable utility.
- Updated examples and documentation to reflect the new Kerberos image.

Author: CoderYellow

core/src/main/kotlin/org/openprojectx/bigdata/test/core/BigDataTestKitOptions.kt

@@ -14,7 +14,7 @@ data class BigDataTestKitOptions(
 
 data class KerberosOptions(
     val enabled: Boolean = false,
-    val image: String = "openprojectx/kerby-kdc:latest",
+    val image: String = "ghcr.io/openprojectx/directory-kerby/kerby-kdc:latest",
     val realm: String = "EXAMPLE.COM",
     val domain: String = "example.com",
     val clientPrincipal: String = "app_user@EXAMPLE.COM",

core/src/main/kotlin/org/openprojectx/bigdata/test/core/container/BigDataContainerFactory.kt

@@ -77,6 +77,7 @@ internal class BigDataContainerFactory(
             addIfEnabled(options.kafka.kafkaUiKerberos)
             if (options.kafka.kerberos.enabled && options.kafka.kafkaUiEnabled) addPrincipal(options.kafka.kafkaUiKerberos)
         }
+        writeContainerKerberosConf(kerberos)
 
         val container = GenericBigDataContainer(kerberos.image)
             .withNetwork(network)
@@ -875,6 +876,7 @@ internal class BigDataContainerFactory(
     }
 
     private fun mountKerberos(container: GenericContainer<*>) {
+        writeContainerKerberosConf(options.kerberos)
         container.withFileSystemBind(kerberosDirectory(), "/kerby", BindMode.READ_ONLY)
     }
 
@@ -946,28 +948,33 @@ internal class BigDataContainerFactory(
     private fun writeLocalKerberosConf(options: KerberosOptions, host: String, port: Int): String {
         val path = Path.of(localKerberosPath("/kerby/client/krb5.conf"))
         Files.createDirectories(path.parent)
-        Files.writeString(
-            path,
-            """
-            [libdefaults]
-              default_realm = ${options.realm}
-              dns_lookup_realm = false
-              dns_lookup_kdc = false
-              rdns = false
-              udp_preference_limit = 1
-
-            [realms]
-              ${options.realm} = {
-                kdc = $host:$port
-                admin_server = $host:$port
-              }
-
-            [domain_realm]
-              .${options.domain} = ${options.realm}
-              ${options.domain} = ${options.realm}
-            """.trimIndent(),
-            StandardCharsets.UTF_8,
-        )
+        Files.writeString(path, kerberosConf(options, host, port), StandardCharsets.UTF_8)
         return path.toString()
     }
+
+    private fun writeContainerKerberosConf(options: KerberosOptions) {
+        val path = Path.of(kerberosDirectory()).resolve("client/krb5.conf")
+        Files.createDirectories(path.parent)
+        Files.writeString(path, kerberosConf(options, "kerby-kdc", 88), StandardCharsets.UTF_8)
+    }
+
+    private fun kerberosConf(options: KerberosOptions, host: String, port: Int): String =
+        """
+        [libdefaults]
+          default_realm = ${options.realm}
+          dns_lookup_realm = false
+          dns_lookup_kdc = false
+          rdns = false
+          udp_preference_limit = 1
+
+        [realms]
+          ${options.realm} = {
+            kdc = $host:$port
+            admin_server = $host:$port
+          }
+
+        [domain_realm]
+          .${options.domain} = ${options.realm}
+          ${options.domain} = ${options.realm}
+        """.trimIndent()
 }

doc/user-guide.adoc

@@ -221,7 +221,7 @@ Service images can be overridden from TOML with an `[images]` table. The JUnit e
 [source,toml]
 ----
 [images]
-kerberos = "openprojectx/kerby-kdc:latest"
+kerberos = "ghcr.io/openprojectx/directory-kerby/kerby-kdc:latest"
 hdfs = "apache/hadoop:3.5.0"
 hiveMetastore = "ghcr.io/openprojectx/hive:3.1.3-hadoop-3.4.2-gcs-4.0.4-jdk17-0.1.4"
 hiveMetastorePostgres = "postgres:16-alpine"

example/spark/src/test/resources/spark-bigdata-test-common.toml

@@ -1,5 +1,5 @@
 [images]
-kerberos = "openprojectx/kerby-kdc:latest"
+kerberos = "ghcr.io/openprojectx/directory-kerby/kerby-kdc:latest"
 hdfs = "apache/hadoop:3.5.0"
 hiveMetastore = "ghcr.io/openprojectx/hive:3.1.3-hadoop-3.4.2-gcs-4.0.4-jdk17-0.1.4"
 hiveMetastorePostgres = "postgres:16-alpine"

junit5/src/main/kotlin/org/openprojectx/bigdata/test/junit5/BigDataTestExtension.kt

@@ -132,7 +132,7 @@ class BigDataTestExtension : BeforeAllCallback, AfterAllCallback, ParameterResol
             builder.withKerberos(
                 KerberosOptions(
                     enabled = true,
-                    image = images.kerberos ?: "openprojectx/kerby-kdc:latest",
+                    image = images.kerberos ?: "ghcr.io/openprojectx/directory-kerby/kerby-kdc:latest",
                     clientPrincipal = annotation.kerberosClientPrincipal,
                     clientPassword = annotation.kerberosClientPassword,
                 ),