From c5b3d04d412403936f22498e88619cef2907a592 Mon Sep 17 00:00:00 2001
From: Fabien Boucher <fboucher@redhat.com>
Date: Jun 06 2019 15:22:50 +0000
Subject: Add a role to extract a krb keytab from a zuul secret


---

diff --git a/roles/krb-secret/tasks/main.yaml b/roles/krb-secret/tasks/main.yaml
new file mode 100644
index 0000000..ede1329
--- /dev/null
+++ b/roles/krb-secret/tasks/main.yaml
@@ -0,0 +1,14 @@
+---
+- name: base64 decode of the keytab
+  shell: "echo \"{{ krb_keytab.keytab }}\" | base64 -d"
+  register: decode
+
+- name: Register krb data facts
+  set_fact:
+    krb_principal: "{{ krb_keytab.principal }}"
+    krb_keytab_path: "{{ ansible_user_dir }}/.keytab"
+
+- name: Save keytab on filesystem
+  copy:
+    dest: "{{ krb_keytab_path }}"
+    content: "{{ decode.stdout }}"