copr-fe: support for principal alias

Relates: https://pagure.io/fedora-infrastructure/issue/10065
2021-09-06 22:31:56 +02:00 · 2021-09-06 22:31:56 +02:00 · 3f5cb87166
commit 3f5cb87166
parent 6aaa49c63d
3 changed files with 5 additions and 0 deletions
--- a/inventory/host_vars/copr-fe-dev.aws.fedoraproject.org
+++ b/inventory/host_vars/copr-fe-dev.aws.fedoraproject.org
@ -2,6 +2,7 @@
 datacenter: aws
 inventory_hostname: "copr-fe-dev.aws.fedoraproject.org"
 inventory_instance_name: copr-fe-dev
+principal_alias: "HTTP/copr-fe-dev.cloud.fedoraproject.org@STG.FEDORAPROJECT.ORG"

 nm_controlled_resolv: True
 ansible_ifcfg_blocklist: True
--- a/roles/copr/frontend-cloud/tasks/httpd.yml
+++ b/roles/copr/frontend-cloud/tasks/httpd.yml
@ -99,3 +99,4 @@
    kt_location: /etc/httpd/conf.d/copr-frontend-http-api.keytab
    owner_group: apache
    owner_user: apache
+    principal_alias: "{{ principal_alias }}"
--- a/roles/ipa/service/tasks/main.yml
+++ b/roles/ipa/service/tasks/main.yml
@ -14,6 +14,9 @@
  ipaservice:
    ipaadmin_password: "{{ ipa_admin_password }}"
    name: "{{ service }}/{{ host }}"
+{% if principal_alias is defined %}
+    principal: "{{ principal_alias }}"
+{% endif %}
    force: yes
  tags:
  - config