Move sigul bridge to krb

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>

roles/sigul/bridge/tasks/main.yml

@@ -10,7 +10,7 @@
   - config
 
 - name: Setup primary koji config file
-  copy: src=koji-primary.conf dest=/etc/koji-primary.conf owner=root group=root mode=644
+  template: src=koji-primary.conf.j2 dest=/etc/koji-primary.conf owner=root group=root mode=644
   when: inventory_hostname.startswith('sign') and env == "production"
 
 - name: Setup primary stg koji config file

roles/sigul/bridge/templates/koji-primary.conf.j2

@@ -16,9 +16,5 @@ topurl = https://kojipkgs.fedoraproject.org/
 
 anon_retry = true
 
-;client certificate
+krb_principal = sigul/{{ inventory_hostname }}@{{ krb_realm }}
-cert = /etc/sigul/fedora.cert
+keytab = /etc/krb5.sigul_{{ inventory_hostname }}.keytab
-
-;certificate of the CA that issued the HTTP server certificate
-serverca = /etc/sigul/fedora-server-ca.cert
-