Make kojira use krb

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>

playbooks/groups/koji-hub.yml

@@ -32,7 +32,7 @@
   - fedmsg/base
   - role: keytab/service
     service: kojira
-    host: "koji.fedoraproject.org"
+    host: "koji{{env_suffix}}.fedoraproject.org"
   - koji_hub
   - { role: nfs/server, when: env == "staging" }
   - { role: keepalived, when: env == "production" and inventory_hostname.startswith('koji') }

roles/koji_hub/tasks/main.yml

@@ -336,7 +336,7 @@
   - kojira
 
 - name: kojira config
-  copy: src=kojira.conf dest=/etc/kojira/kojira.conf
+  template: src=kojira.conf dest=/etc/kojira/kojira.conf
   tags:
   - config
   - koji_hub

roles/koji_hub/templates/kojira.conf.j2

@@ -5,9 +5,9 @@
 
 ; For Kerberos authentication
 ; the principal to connect with
-principal=kojira/koji.fedoraproject.org@FEDORAPROJECT.ORG
+principal=kojira/koji{{env_suffix}}.fedoraproject.org@{{ipa_realm}}
 ; The location of the keytab for the principal above
-keytab=/etc/krb5.kojira_koji.fedoraproject.org.keytab
+keytab=/etc/krb5.kojira_koji{{env_suffix}}.fedoraproject.org.keytab
 
 ; The URL for the koji hub server
 server=https://koji.fedoraproject.org/kojihub