Also install KRA

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>

roles/ipa/tasks/main.yml

@@ -38,6 +38,17 @@
   - config
   when: inventory_hostname.startswith("ipa01")
 
+- name: install IPA vault
+  command: ipa-kra-install
+           --password={{ipa_dm_password}}
+           --unattended
+           --log-file=/var/log/ipakrainstall.log
+           creates=/var/log/ipakrainstall.log
+  tags:
+  - ipa
+  - config
+  when: inventory_hostname.startswith("ipa01")
+
 - name: determine whether we need to set up replication
   stat: path=/etc/ipa/default.conf
   register: replication_status