Add keytab secret for Koschei

playbooks/openshift-apps/koschei.yml

@@ -17,6 +17,12 @@
     template: frontend-config.yml
     objectname: frontend-config.yml
 
+  - role: openshift/keytab
+    key: krb5.keytab
+    secret_name: backend-keytab
+    service: koschei
+    host: "koschei-backend01{{ env_suffix }}.phx2.fedoraproject.org"
+
   - role: openshift/object
     template: frontend-deployment.yml
     objectname: frontend-deployment.yml

roles/openshift-apps/koschei/templates/backend-deployment.yml

@@ -21,6 +21,10 @@ spec:
         - name: config-volume
           mountPath: /etc/koschei
           readOnly: true
+        - name: keytab-volume
+          mountPath: /etc/krb5.keytab
+          subPath: krb5.keytab
+          readOnly: true
         resources:
           limits:
             memory: 256Mi
@@ -28,3 +32,6 @@ spec:
       - name: config-volume
         secret:
           secretName: backend-config
+      - name: keytab-volume
+        secret:
+          secretName: backend-keytab