reprepro: install keytab

In converting this to ansible I forgot to install the reprepro keytab.
The encoded secret has been added for production.

Change-Id: I39d586e375ad96136cc151a7aed6f4cd5365f3c7

playbooks/roles/reprepro/tasks/main.yaml

@@ -1,3 +1,16 @@
+- name: Install afsadmin keytab
+  shell: 'echo "{{ reprepro_keytab }}" | base64 -d > /etc/reprepro.keytab'
+  args:
+    creates: /etc/reprepro.keytab
+  no_log: True
+
+- name: Ensure permissions on reprepro keytab
+  file:
+    path: '/etc/reprepro.keytab'
+    owner: root
+    group: root
+    mode: '0400'
+
 - name: Install reprepro
   package:
     name:

playbooks/zuul/templates/host_vars/mirror-update01.opendev.org.yaml.j2

@@ -19,3 +19,6 @@ mirror_update_keytab_opensuse: |-
 mirror_update_keytab_yum-puppetlabs: |-
   aEkRPhZllm2F2y71Zgf3X9NjyHT7/sS8bd/vXt9oG1PKkUmpeBXprFnrxzMuKiupHwwTa09w5LuB
   blLvBOC8W5Miz1u6TkRe+/jLQurLpzYHwk3bJCJ6s3WwPKDej54TDVgrVQ==
+reprepro_keytab: |-
+  aEkRPhZllm2F2y71Zgf3X9NjyHT7/sS8bd/vXt9oG1PKkUmpeBXprFnrxzMuKiupHwwTa09w5LuB
+  blLvBOC8W5Miz1u6TkRe+/jLQurLpzYHwk3bJCJ6s3WwPKDej54TDVgrVQ==

testinfra/test_mirror-update.py

@@ -46,7 +46,8 @@ def test_keytabs(host):
                    '/etc/epel.keytab',
                    '/etc/fedora.keytab',
                    '/etc/opensuse.keytab',
-                   '/etc/yum-puppetlabs.keytab']:
+                   '/etc/yum-puppetlabs.keytab',
+                   '/etc/reprepro.keytab']:
 
         f = host.file(keytab)
         assert f.exists