diff --git a/roles/openshift-apps/planet/templates/deployment.yml b/roles/openshift-apps/planet/templates/deployment.yml
index 0778e0510a..20e999824e 100644
--- a/roles/openshift-apps/planet/templates/deployment.yml
+++ b/roles/openshift-apps/planet/templates/deployment.yml
@@ -23,7 +23,7 @@ spec:
         image: image-registry.openshift-image-registry.svc:5000/planet/planet:latest
         env:
         - name: KRB5_CONFIG
-          value: '/etc/krb5.conf'
+          value: '/etc/krb5/krb5.conf'
           name: KRB5_CLIENT_KTNAME
           value: '/etc/keytabs/http'
         ports:
diff --git a/roles/openshift-apps/planet/templates/krb5.conf b/roles/openshift-apps/planet/templates/krb5.conf
index 3897d425b8..dda4ca8dd5 100644
--- a/roles/openshift-apps/planet/templates/krb5.conf
+++ b/roles/openshift-apps/planet/templates/krb5.conf
@@ -11,15 +11,15 @@ includedir /etc/krb5.conf.d/
   dns_lookup_kdc = false
 
 [realms]
-{{ ipa_realm }} = {
-  default_domain = {{ ipa_realm | lower }}
-  pkinit_anchors = FILE:/etc/ipa/ca.crt
-  pkinit_pool = FILE:/etc/ipa/ca.crt
-}
+  {{ ipa_realm }} = {
+    default_domain = {{ ipa_realm | lower }}
+    pkinit_anchors = FILE:/etc/ipa/ca.crt
+    pkinit_pool = FILE:/etc/ipa/ca.crt
+  }
 
 [domain_realm]
-{{ env_short }}.fedoraproject.org = {{ ipa_realm }}
- .{{ env_short }}.fedoraproject.org = {{ ipa_realm }}
- {{ env_short }}.{{ datacenter }}.fedoraproject.org = {{ ipa_realm }}
- .{{ env_short }}.{{ datacenter }}.fedoraproject.org = {{ ipa_realm }}
- fasjson{{ env_suffix }}.fedoraproject.org = {{ ipa_realm }}
+  {{ env_short }}.fedoraproject.org = {{ ipa_realm }}
+  .{{ env_short }}.fedoraproject.org = {{ ipa_realm }}
+  {{ env_short }}.{{ datacenter }}.fedoraproject.org = {{ ipa_realm }}
+  .{{ env_short }}.{{ datacenter }}.fedoraproject.org = {{ ipa_realm }}
+  fasjson{{ env_suffix }}.fedoraproject.org = {{ ipa_realm }}