Active Directory and Kubernetes – everything you need to know about gMSA with Windows Containers

This is a great write-up! Can you provide any context into the correct values to use for a k8s gmsaCredentialSpec values for SID & GUID? We have 2 gmsa's setup, one using "New-CredentialSpec" module & one using simply the output from "Get-ADServiceAccount". The gmsaCredentialSpec using values from "New-CredentialSpec" seem to run all test commands successfully, whereas the "Get-ADServiceAccount" still produce a successful kerberos ticket request, but result in nltest.exe /sc_verify:<domain> "error_no_logon_servers" response.