main
Extended tests for kerberos
<drop>: Allow basic fallback without hairpin
Switch to groupified APIs
Remove support for spec.portalIP