message-tagging-service: Add Kerberos keytab

playbooks/openshift-apps/message-tagging-service.yml

@@ -13,6 +13,12 @@
   roles:
   - openshift/project
 
+  - role: openshift/keytab
+    secret_name: keytab
+    key: krb5.keytab
+    service: message-tagging-service
+    host: "message-tagging-service{{ env_suffix }}.fedoraproject.org"
+
   tasks:
     - name: Apply objects
       include_role: name=openshift/object

roles/openshift-apps/message-tagging-service/templates/deployment.yml

@@ -21,10 +21,14 @@ spec:
         image: quay.io/factory2/message-tagging-service:{{quay_tag}}
         ports:
         - containerPort: 8080
-#        volumeMounts:
+        volumeMounts:
 #        - name: config
 #          mountPath: /etc/mts
 #          readOnly: true
+        - name: keytab
+          mountPath: /etc/krb5.keytab
+          subPath: krb5.keytab
+          readOnly: true
         resources:
           requests:
             cpu: 500m
@@ -44,7 +48,10 @@ spec:
           httpGet:
             path: /
             port: 8080
-#      volumes:
+      volumes:
 #      - name: config
 #        secret:
 #          secretName: mts-config
+      - name: keytab
+        secret:
+          secretName: keytab