From 03f57303e23a92011ee84c0152ab6c4e1ca64367 Mon Sep 17 00:00:00 2001
From: Michal Konecny <mkonecny@redhat.com>
Date: Fri, 11 Oct 2024 16:55:35 +0200
Subject: [PATCH] [ipa/server] Add KRA role to replicas as well

This should prevent error during backup:

```
Error: Local roles CA do not match globally used roles CA, KRA. A backup done on this host would not be complete enough to restore a fully functional, identical cluster.
```

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
---
 roles/ipa/server/tasks/main.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/ipa/server/tasks/main.yml b/roles/ipa/server/tasks/main.yml
index b04a3e2f40..9dc6c18231 100644
--- a/roles/ipa/server/tasks/main.yml
+++ b/roles/ipa/server/tasks/main.yml
@@ -147,6 +147,7 @@
   - name: deploy replica
     command: ipa-replica-install
              --setup-ca
+             --setup-kra
              --admin-password={{ipa_admin_password}}
              --no-host-dns
              --mkhomedir