kojira user

defaults/main.yml

@@ -43,6 +43,7 @@ koji_web_tls_key: /etc/pki/tls/private/koji.rockylinux.org.key
 # Kojira
 koji_kojira: true
 koji_kojira_user: kojira
+koji_kojira_user_kerb: koji/kojira
 koji_kojira_principal: koji/kojira@ROCKYLINUX.ORG
 koji_kojira_keytab: /etc/koji.keytab
 

tasks/main.yml

@@ -18,17 +18,7 @@
 
 - name: Configure local koji admin
   import_tasks: koji-admin-local.yml
-  when:
+  when: koji_admin_client
-    - koji_admin_client
-    - koji_admin_localuser
-
-# This is specifically if we want the IPA account to also be an account on this
-# system. ymmv.
-- name: Configure ipa koji admin
-  import_tasks: koji-admin-ipa.yml
-  when:
-    - koji_admin_client
-    - not koji_admin_localuser
 
 - name: Configure plugins
   import_tasks: plugins.yml

templates/koji-pgsql.sql.j2

@@ -1,5 +1,6 @@
 with user_id as (insert into users (name, status, usertype) values ('{{ koji_admin_user }}', 0, 0) returning id)
 insert into user_krb_principals (user_id, krb_principal) values ((select id from user_id),'{{ koji_admin_principal }}');
 insert into user_perms (user_id, perm_id, creator_id) values (1, 1, 1);
-insert into users (name, status, usertype) values ('{{ koji_kojira_user }}', 0, 0);
+with user_id as (insert into users (name, status, usertype) values ('{{ koji_kojira_user_kerb }}', 0 0) returning id)
+insert into user_krb_principals (user_id, krb_principal) values ((select id from user_id),'{{ koji_kojira_principal }}');
 INSERT INTO user_perms (user_id, perm_id, creator_id) VALUES (2, 10, 1);