diff --git a/playbooks/groups/pkgs.yml b/playbooks/groups/pkgs.yml
index 3b8ea4d26b..bc099d33fc 100644
--- a/playbooks/groups/pkgs.yml
+++ b/playbooks/groups/pkgs.yml
@@ -18,6 +18,12 @@
   - collectd/base
   - sudo
   - apache
+  - role: keytab/service
+    owner_user: apache
+    owner_group: apache
+    service: HTTP
+    host: {{inventory_hostname}}
+    when: env == "staging"
   - gitolite/base
   - cgit/base
   - cgit/clean_lock_cron