Keycloak Kerberos in kubernetes gssheader did not find the right tag

Does this resolve your issue?

Summary: Check that the SPN is correct with matching hostname.

Kerberos is known to be a bit picky for principal names.
https://web.mit.edu/kerberos/krb5-latest/doc/admin/princ_dns.html