From f3aa1566007c868bb439636b904b9ae5e3fa61a0 Mon Sep 17 00:00:00 2001
From: Pierre-Yves Chibon <pingou@pingoured.fr>
Date: Wed, 17 Mar 2021 09:51:13 +0100
Subject: [PATCH] zabbix: create a keytab we can use to authenticate

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
---
 playbooks/groups/zabbix.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/playbooks/groups/zabbix.yml b/playbooks/groups/zabbix.yml
index 30260bf41e..efa7142645 100644
--- a/playbooks/groups/zabbix.yml
+++ b/playbooks/groups/zabbix.yml
@@ -16,6 +16,18 @@
   - hosts
   - { role: fas_client, when: env != "staging" }
   - { role: ipa/client, when: env == "staging" }
+  - role: keytab/service
+    owner_user: apache
+    owner_group: apache
+    service: HTTP
+    host: "zabbix{{env_suffix}}.fedoraproject.org"
+    when: datacenter == 'iad2'
+  - role: keytab/service
+    owner_user: apache
+    owner_group: apache
+    service: HTTP
+    host: "zabbix-external{{env_suffix}}.fedoraproject.org"
+    when: datacenter != 'iad2'
   - collectd/base
   - apache
   - sudo