From 6e62ef45ef803bfc02125e384c35525b1e757e38 Mon Sep 17 00:00:00 2001
From: Jim Halfpenny <1987407+Jimvin@users.noreply.github.com>
Date: Thu, 4 Sep 2025 10:17:49 +0100
Subject: [PATCH] Set max_renewable_life = 7d in KDC realm config

Setting max_renewable_life = 7d means by default tickets will be renewable for 7 days. This is useful for applications that expect tickets to be renewable as part of their ticket lifecycle management.
---
 stacks/end-to-end-security/krb5.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/stacks/end-to-end-security/krb5.yaml b/stacks/end-to-end-security/krb5.yaml
index e92aa69f..06b31066 100644
--- a/stacks/end-to-end-security/krb5.yaml
+++ b/stacks/end-to-end-security/krb5.yaml
@@ -122,6 +122,7 @@ data:
     KNAB.COM = {
      acl_file = /stackable/config/kadm5.acl
      disable_encrypted_timestamp = false
+     max_renewable_life = 7d
     }
     [domain_realm]
     .cluster.local = KNAB.COM