fixup

Signed-off-by: Paolo Insogna <paolo@cowtech.it>

Author: ShogunPanda

.github/workflows/ci.yml

@@ -42,9 +42,7 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
       - name: Start Kafka (${{ matrix.confluent-kafka-version }}) Cluster
-        run: |
-          id && mkdir -p tmp/kerberos && chown -R 1000:1000 tmp/kerberos
-          docker compose up --build --force-recreate -d --wait || (ls -l tmp && ls -l tmp/kerberos && docker compose logs && exit 1)
+        run: docker compose up --build --force-recreate -d --wait || (ls -l tmp && ls -l tmp/kerberos && docker compose logs && exit 1)
         env:
           KAFKA_VERSION: ${{ matrix.confluent-kafka-version }}
       - name: Run Tests

docker-compose.yml

@@ -1,9 +1,6 @@
 services:
   kdc:
-    image: plt-kafka-kdc:latest
-    pull_policy: never
-    build:
-      context: ./docker/kerberos
+    image: ubuntu:latest
     container_name: kdc
     ports:
       - '8000:88/tcp'
@@ -13,7 +10,7 @@ services:
       - './docker/kerberos/krb5-kdc.conf:/etc/krb5.conf:ro'
       - './docker/kerberos/kdc.conf:/var/lib/krb5kdc/kdc.conf:ro'
       - './docker/kerberos/init.sh:/init.sh:ro'
-      - './tmp/kerberos:/data'
+      - 'kerberos:/data'
     entrypoint: ['/bin/sh', '/init.sh']
     healthcheck:
       test: ['CMD', 'kadmin.local', '-q', 'list_principals']
@@ -106,7 +103,7 @@ services:
     volumes:
       - "./docker/sasl/jaas-kerberos.conf:/etc/kafka/jaas.conf:ro"
       - "./docker/kerberos/krb5-broker.conf:/etc/krb5.conf:ro"
-      - "./tmp/kerberos/broker.keytab:/etc/kafka/broker.keytab:ro"
+      - 'kerberos:/data'
     depends_on:
       kdc:
         condition: service_healthy
@@ -173,3 +170,6 @@ services:
       # Broker specific general and port options
       KAFKA_NODE_ID: "3"
       KAFKA_ADVERTISED_LISTENERS: "PLAINTEXT://localhost:9013,DOCKER://broker-cluster-3:19092"
+
+volumes:
+  kerberos:

docker/kerberos/Dockerfile

@@ -3,6 +3,12 @@ set -e
 
 # Setup KDC if needed
 if [ ! -f /var/lib/krb5kdc/principal ]; then
+  chown -R ubuntu:ubuntu /data
+  chmod -R 755 /data
+
+  echo "Installing Kerberos packages ..."
+  apt-get update && apt-get install -y krb5-kdc krb5-admin-server && rm -rf /var/lib/apt/lists/*
+
   echo "Setting up KDC ..."
   kdb5_util create -s -P password
 
@@ -15,9 +21,10 @@ if [ ! -f /var/lib/krb5kdc/principal ]; then
   kadmin.local -q "addprinc -randkey admin-keytab@EXAMPLE.COM" # Client with keytab
   kadmin.local -q "addprinc -pw admin admin-password@EXAMPLE.COM" # Client with password
 
-  # Genera keytab
+  # Generate keytabs
   kadmin.local -q "ktadd -k /data/broker.keytab broker/broker-sasl-kerberos@EXAMPLE.COM"
   kadmin.local -q "ktadd -k /data/admin.keytab admin-keytab@EXAMPLE.COM"
+  chown -R ubuntu:ubuntu /data  
 fi  
 
 krb5kdc