From dc64c85788aa37f7fdcd425c0e5101a320f883b7 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Sun, 4 Dec 2016 02:54:13 +0000
Subject: [PATCH] Give ipa keytab for id.fp.o

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 playbooks/groups/ipa.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/playbooks/groups/ipa.yml b/playbooks/groups/ipa.yml
index a1d30e30f7..21491091b8 100644
--- a/playbooks/groups/ipa.yml
+++ b/playbooks/groups/ipa.yml
@@ -42,6 +42,18 @@
 
   roles:
   - ipa/server
+  - role: keytab/service
+    owner_user: apache
+    owner_group: apache
+    service: HTTP
+    host: "id.stg.fedoraproject.org"
+    when: env == "staging"
+  - role: keytab/service
+    owner_user: apache
+    owner_group: apache
+    service: HTTP
+    host: "id.fedoraproject.org"
+    when: env == "production"
 
   handlers:
   - include: "{{ handlers }}/restart_services.yml"