- name: Create nfs kerberos principal
  ansible.builtin.command:
    cmd: "kadmin.local add_principal -nokey nfs/{{ ansible_facts['hostname'] }}"
  failed_when: _task.result.rc != 0 and _task.result.rc != 1
  changed_when: _task.result.rc == 0

- name: Check keytab
  ansible.builtin.command:
    cmd: "k5srvutil list"
  register: keytab

- name: Add nfs kerberos to keytab
  ansible.builtin.command:
    cmd: "kadmin.local ktadd nfs/{{ kerberos_realm}}"
  when: keytab.stdout is not search("nfs/" ~ ansible_facts['hostname'])