Install keytab from dovecot role and not from playbook

playbooks/mail.yml

@@ -15,10 +15,6 @@
       principals:
         - "host/{{ inventory_hostname }}@{{ kerberos_realm }}"
         - "smtp/{{ mail_server }}@{{ kerberos_realm }}"
-    - role: kerberos/keytab
-      keytab: /etc/dovecot/dovecot.keytab
-      principals:
-        - "imap/{{ mail_server }}@{{ kerberos_realm }}"
     - nfs-client
     - sssd
     - autofs

roles/dovecot/tasks/main.yml

@@ -5,6 +5,14 @@
     name: dovecot
     state: installed
 
+- name: create kerberos keytab
+  include_role:
+    name: kerberos/keytab
+  vars:
+    keytab: /etc/dovecot/dovecot.keytab
+    principals:
+      - "imap/{{ mail_server }}@{{ kerberos_realm }}"
+
 - name: install privatekey
   copy:
     dest: "{{ tls_private }}/{{ mail_server }}.key"