@@ -470,6 +470,29 @@ Version, %commit, and %ldflags values on your own or you may use

 [tito](https://github.com/dgoodwin/tito) to build

 and tag releases.

+## GSSAPI-enabled builds

+

+When built with GSSAPI support, the `oc` client supports logging in with Kerberos credentials on Linux and OS X.

+GSSAPI-enabled builds of `oc` cannot be cross-compiled, but must be built on the target platform with the GSSAPI header files available.

+

+On Linux, ensure the `krb5-devel` package is installed:

+

+    $ sudo yum install -y krb5-devel

+

+On OS X, you can obtain header files via Homebrew:

+

+    $ brew install homebrew/dupes/heimdal --without-x11

+

+Once dependencies are in place, build with the `gssapi` tag:

+

+    $ hack/build-go.sh cmd/oc -tags=gssapi

+

+Verify that the GSSAPI feature is enabled with `oc version`: 

+

+    $ oc version

+    ...

+    features: Basic-Auth GSSAPI Kerberos SPNEGO

+

 ## Swagger API Documentation

 OpenShift and Kubernetes integrate with the [Swagger 2.0 API framework](http://swagger.io) which aims to make it easier to document and write clients for RESTful APIs.  When you start OpenShift, the Swagger API endpoint is exposed at `https://localhost:8443/swaggerapi`. The Swagger UI makes it easy to view your documentation - to view the docs for your local version of OpenShift start the server with CORS enabled:

@@ -29,7 +29,7 @@ export OS_OUTPUT_GOPATH

 #   make all

 #   make all WHAT=cmd/oc GOFLAGS=-v

 all build:

-	hack/build-go.sh $(WHAT)

+	hack/build-go.sh $(WHAT) $(GOFLAGS)

 .PHONY: all build

 # Build the test binaries.

@@ -24,7 +24,7 @@ fi

 # Build the primary client/server for all platforms

 OS_BUILD_PLATFORMS=("${platforms[@]}")

-os::build::build_binaries "${OS_CROSS_COMPILE_TARGETS[@]}"

+OS_GOFLAGS_LINUX_AMD64="-tags=gssapi" os::build::build_binaries "${OS_CROSS_COMPILE_TARGETS[@]}"

 # Build image binaries for a subset of platforms. Image binaries are currently

 # linux-only, and are compiled with flags to make them static for use in Docker

@@ -317,8 +317,13 @@ os::build::internal::build_binaries() {

       fi

       if [[ ${#nonstatics[@]} -gt 0 ]]; then

+        # allow per-os/arch build flags like OS_GOFLAGS_LINUX_AMD64

+        local platform_goflags_envvar=OS_GOFLAGS_$(echo ${platform} | tr '[:lower:]/' '[:upper:]_')

+        local platform_goflags

+        eval "platform_goflags=(${!platform_goflags_envvar:-})"

+

         GOOS=${platform%/*} GOARCH=${platform##*/} go install \

-          "${goflags[@]:+${goflags[@]}}" \

+          "${goflags[@]:+${goflags[@]}}" "${platform_goflags[@]:+${platform_goflags[@]}}" \

           -ldflags "${version_ldflags}" \

           "${nonstatics[@]}"

@@ -137,8 +137,12 @@ else

 fi

 # Check openshift version

-out=$(openshift version)

-echo openshift: $out

+echo "openshift version:"

+openshift version

+

+# Check oc version

+echo "oc version:"

+oc version

 # profile the web

 export OPENSHIFT_PROFILE="${WEB_PROFILE-}"

@@ -84,7 +84,8 @@ out=$(

 )

 # Setup

-echo "[INFO] `openshift version`"

+echo "[INFO] openshift version: `openshift version`"

+echo "[INFO] oc version:        `oc version`"

 echo "[INFO] Using images:							${USE_IMAGES}"

 echo "[INFO] Starting OpenShift containerized server"

@@ -55,6 +55,7 @@ ExclusiveArch:  x86_64

 Source0:        https://%{import_path}/archive/%{commit}/%{name}-%{version}.tar.gz

 BuildRequires:  systemd

 BuildRequires:  golang = %{golang_version}

+BuildRequires:  krb5-devel

 Requires:       %{name}-clients = %{version}-%{release}

 Requires:       iptables

 Obsoletes:      openshift < %{package_refector_version}

@@ -187,10 +188,9 @@ pushd _thirdpartyhacks

 popd

 export GOPATH=$(pwd)/_build:$(pwd)/_thirdpartyhacks:%{buildroot}%{gopath}:%{gopath}

 # Build all linux components we care about

-for cmd in oc openshift dockerregistry

-do

-        go install -ldflags "%{ldflags}" %{import_path}/cmd/${cmd}

-done

+go install -ldflags "%{ldflags}" %{import_path}/cmd/dockerregistry

+go install -ldflags "%{ldflags}" -tags=gssapi %{import_path}/cmd/openshift

+go install -ldflags "%{ldflags}" -tags=gssapi %{import_path}/cmd/oc

 go test -c -o _build/bin/extended.test -ldflags "%{ldflags}" %{import_path}/test/extended

 %if 0%{?make_redistributable}

@@ -45,6 +45,10 @@ function wait_for_app() {

 }

 os::test::junit::declare_suite_start "end-to-end/core"

+

+echo "[INFO] openshift version: `openshift version`"

+echo "[INFO] oc version:        `oc version`"

+

 # service dns entry is visible via master service

 # find the IP of the master service by asking the API_HOST to verify DNS is running there

 MASTER_SERVICE_IP="$(dig "@${API_HOST}" "kubernetes.default.svc.cluster.local." +short A | head -n 1)"