Generate keytab for ODCS and use it in Koji profile.

playbooks/groups/odcs.yml

@@ -115,6 +115,12 @@
     nfs_src_dir: 'fedora_koji'
     when: env == 'staging'
 
+  - role: keytab/service
+    service: odcs
+    owner_user: odcs
+    owner_group: odcs
+    host: "odcs{{env_suffix}}.fedoraproject.org"
+
   post_tasks:
   - file: src=/mnt/fedora_koji/koji dest=/mnt/koji state=link
     tags: nfs/client

roles/odcs/backend/templates/etc/koji.conf.d/odcs.conf.j2

@@ -4,6 +4,8 @@ weburl = https://koji.fedoraproject.org/koji
 topurl = https://kojipkgs.fedoraproject.org/
 authtype = kerberos
 krb_rdns = false
+principal = odcs/odcs.fedoraproject.org@FEDORAPROJECT.ORG
+keytab = /etc/krb5.odcs_odcs{{env_suffix}}.fedoraproject.org.keytab
 
 [staging]
 server = https://koji.stg.fedoraproject.org/kojihub
@@ -11,3 +13,6 @@ weburl = https://koji.stg.fedoraproject.org/koji
 topurl = https://kojipkgs.stg.fedoraproject.org/
 authtype = kerberos
 krb_rdns = false
+principal = odcs/odcs.stg.fedoraproject.org@STG.FEDORAPROJECT.ORG
+keytab = /etc/krb5.odcs_odcs{{env_suffix}}.fedoraproject.org.keytab
+