I'd need a bare minimum spec Ganeti VM in eqiad to test Kerberos in the Hadoop Test cluster. The VM will probably be deleted once we will fully productionize the service, but it is essential as of now to iron out all the implementation details of the project.
The VM doesn't need to be in the Analytics VLAN, and I'd say that a 40/50 GB disk space is more than enough for this use case. The DNS hostname could be kerberos1001.eqiad.wmnet. It doesn't need any public IP.