roles/kojira: Deploy the Koji repository agent

The *kojira* role sets up the Koji repository agent to manage
repository metadata for build tags. It runs as a daemon, usually on the
same machine as the Koji hub. A client certificate is required for
authentication, and must be supplied by placing it in the
`certs/koji/{{ inventory_hostname }}` directory.

roles/kojira/templates/kojira.conf.j2

@@ -0,0 +1,54 @@
+{#- vim: set ft=jinja : -#}
+[kojira]
+; For user/pass authentication
+; user=kojira
+; password=kojira
+
+; For Kerberos authentication
+; the principal to connect with
+;principal=koji/repo@EXAMPLE.COM
+; The location of the keytab for the principal above
+;keytab=/etc/kojira.keytab
+
+; The URL for the koji hub server
+server={{ kojihub_url }}
+
+; The directory containing the repos/ directory
+topdir={{ koji_home }}
+
+; Logfile
+logfile=/var/log/kojira.log
+
+; Include srpms in repos? (not needed for normal operation)
+with_src=no
+
+;configuration for Kerberos authentication
+
+;the kerberos principal to use
+;principal = kojira@EXAMPLE.COM
+
+;location of the keytab
+;keytab = /etc/kojira/kojira.keytab
+
+;the service name of the principal being used by the hub
+;krbservice = host
+
+;configuration for SSL authentication
+
+;client certificate
+cert = /etc/kojira/kojira.pem
+
+;certificate of the CA that issued the client certificate
+ca = /etc/kojira/clientca.crt
+
+;certificate of the CA that issued the HTTP server certificate
+serverca = /etc/kojira/serverca.crt
+
+;how soon (in seconds) to clean up expired repositories. 1 week default
+;deleted_repo_lifetime = 604800
+
+;how soon (in seconds) to clean up dist repositories. 1 week default here too
+;dist_repo_lifetime = 604800
+
+;turn on debugging statements in the log
+;debug = false