Move koji stg to auto-generated keytabs

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>

playbooks/groups/koji-hub.yml

@@ -31,6 +31,13 @@
   - apache
   - fedmsg/base
   - koji_hub
+  - role: keytab/service
+    owner_user: apache
+    owner_group: apache
+    kt_location: /etc/koji-hub/koji-hub.keytab
+    service: host
+    host: "koji.stg.fedoraproject.org"
+    when: env == "staging"
   - { role: nfs/server, when: env == "staging" }
   - { role: keepalived, when: env == "production" and inventory_hostname.startswith('koji') }
   - role: nfs/client

roles/koji_hub/tasks/main.yml

@@ -85,6 +85,7 @@
 - name: install koji-hub keytab
   copy: src={{ private }}/files/keytabs/{{ env }}/koji-hub dest=/etc/koji-hub/koji-hub.keytab
         owner=apache group=apache mode=0600
+  when: env != "staging"
   notify:
   - reload httpd
   tags: