From d60e11d42bee5934d0cad2e108cec162ae0da741 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Thu, 13 Oct 2016 13:11:11 +0000
Subject: [PATCH] Also install KRA

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 roles/ipa/tasks/main.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/roles/ipa/tasks/main.yml b/roles/ipa/tasks/main.yml
index cf07ede5ef..6cab5fc69b 100644
--- a/roles/ipa/tasks/main.yml
+++ b/roles/ipa/tasks/main.yml
@@ -38,6 +38,17 @@
   - config
   when: inventory_hostname.startswith("ipa01")
 
+- name: install IPA vault
+  command: ipa-kra-install
+           --password={{ipa_dm_password}}
+           --unattended
+           --log-file=/var/log/ipakrainstall.log
+           creates=/var/log/ipakrainstall.log
+  tags:
+  - ipa
+  - config
+  when: inventory_hostname.startswith("ipa01")
+
 - name: determine whether we need to set up replication
   stat: path=/etc/ipa/default.conf
   register: replication_status