Bodhi frontends also need access to koji, so give them keytabs too

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>

playbooks/groups/bodhi-backend.yml

@@ -48,14 +48,12 @@
     owner_user: apache
     owner_group: apache
     service: bodhi
-    # We use a generic name here so that we can share the same name between both backends
     host: "bodhi.fedoraproject.org"
     when: env == "production"
   - role: keytab/service
     owner_user: apache
     owner_group: apache
     service: bodhi
-    # We use a generic name here so that we can share the same name between both backends
     host: "bodhi.stg.fedoraproject.org"
     when: env == "staging"
 

playbooks/groups/bodhi2.yml

@@ -23,6 +23,20 @@
       when: env != "staging" }
   - apache
   - mod_wsgi
+
+  - role: keytab/service
+    owner_user: apache
+    owner_group: apache
+    service: bodhi
+    host: "bodhi.fedoraproject.org"
+    when: env == "production"
+  - role: keytab/service
+    owner_user: apache
+    owner_group: apache
+    service: bodhi
+    host: "bodhi.stg.fedoraproject.org"
+    when: env == "staging"
+
   - { role: bodhi2/base, when: "inventory_hostname.startswith('bodhi0')" }
   - { role: fedmsg/base,  when: "inventory_hostname.startswith('bodhi0')" }