system-config/inventory/service/group_vars/kerberos-kdc.yaml

kerberos_kdc_realm: OPENSTACK.ORG
iptables_extra_public_tcp_ports:
  - 88
  - 464
  - 749
  - 754
iptables_extra_public_udp_ports:
  - 88
  - 464
  - 749