From ae6b28553763d55a78abe6f880ebaf17847acf56 Mon Sep 17 00:00:00 2001
From: Siteshwar Vashisht <svashisht@redhat.com>
Date: Dec 05 2023 21:25:04 +0000
Subject: openscanhub: generate keytab files for FAS logins


Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>

---

diff --git a/playbooks/openshift-apps/openscanhub.yml b/playbooks/openshift-apps/openscanhub.yml
index ae6cde3..30ba0cd 100644
--- a/playbooks/openshift-apps/openscanhub.yml
+++ b/playbooks/openshift-apps/openscanhub.yml
@@ -37,4 +37,14 @@
     app: openscanhub
     template: pvc-var-lib-osh.yml
     objectname: pvc-var-lib-osh.yml
+  - role: openshift/keytab
+    app: openscanhub
+    key: /etc/httpd/conf/httpd.keytab
+    secret_name: openscanhub-keytab
+    service: HTTP
+    # https://pagure.io/fedora-infra/ansible/pull-request/1669#comment-195794
+    # We should get separate approval for "opencanhub.fedoraproject.org"
+    # Fix below line if correct route is not generated.
+    # https://pagure.io/fedora-infra/ansible/pull-request/1669#comment-195809
+    # host: "openscanhub.apps.ocp.stg.fedoraproject.org"
     when: env == "staging"