From a28a93dad75248c30c1792ec35f588c8e317c067 Mon Sep 17 00:00:00 2001
From: Ralph Bean <rbean@redhat.com>
Date: Wed, 2 Nov 2016 16:40:14 +0000
Subject: [PATCH] Set a koji-hub ProxyPrincipal for modularity in staging.

---
 roles/koji_hub/templates/hub.conf.j2 | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2
index faed2a3ce9..a77111af92 100644
--- a/roles/koji_hub/templates/hub.conf.j2
+++ b/roles/koji_hub/templates/hub.conf.j2
@@ -31,6 +31,12 @@ HostPrincipalFormat = compile/%s@FEDORAPROJECT.ORG
 {% endif %}
 AuthKeytab = /etc/koji-hub/koji-hub.keytab
 
+{% if env == "staging" %}
+{% if inventory_hostname.startswith('koji') %}
+ProxyPrincipals = modularity@STG.FEDORAPROJECT.ORG
+{% endif %}
+{% endif %}
+
 ##  SSL client certificate auth configuration  ##
 #note: ssl auth may also require editing the httpd config (conf.d/kojihub.conf)