From 4b96539e2752c0589a3129dbd0ad8c1c8c36d46a Mon Sep 17 00:00:00 2001
From: Fabien Boucher <fboucher@redhat.com>
Date: Jun 07 2019 08:31:43 +0000
Subject: Add a role to extract a krb keytab from a zuul secret


---

diff --git a/roles/krb-secret/tasks/main.yaml b/roles/krb-secret/tasks/main.yaml
new file mode 100644
index 0000000..b2960ca
--- /dev/null
+++ b/roles/krb-secret/tasks/main.yaml
@@ -0,0 +1,17 @@
+---
+- name: base64 decode of the keytab
+  shell: "echo \"{{ krb_keytab.keytab }}\" | base64 -d"
+  register: decode
+  no_log: true
+
+- name: Register krb data facts
+  set_fact:
+    krb_principal: "{{ krb_keytab.principal }}"
+    krb_keytab_path: "{{ ansible_user_dir }}/.keytab"
+  no_log: true
+
+- name: Save keytab on filesystem
+  copy:
+    dest: "{{ krb_keytab_path }}"
+    content: "{{ decode.stdout }}" 
+  no_log: true