diff --git a/playbooks/groups/koschei-backend.yml b/playbooks/groups/koschei-backend.yml
index fafdd995aa..1c9ce97f33 100644
--- a/playbooks/groups/koschei-backend.yml
+++ b/playbooks/groups/koschei-backend.yml
@@ -19,6 +19,12 @@
   - builder_repo
   - collectd/base
   - { role: sudo, sudoers: "{{ private }}/files/sudo/koschei01-sudoers" }
+  - role: keytab/service
+    owner_user: koschei
+    owner_group: koschei
+    service: koschei
+    host: "{{inventory_hostname}}"
+    when: env == "staging"
   - koschei/backend
   - fedmsg/base