Use the service account koji token in buildvm to authenticate

Signed-off-by: Clement Verna <cverna@tutanota.com>

playbooks/groups/buildvm.yml

@@ -75,6 +75,7 @@
   pre_tasks:
   - import_tasks: "{{ tasks_path }}/osbs_certs.yml"
   - import_tasks: "{{ tasks_path }}/osbs_repos.yml"
+  - import_tasks: "{{ tasks_path }}/osbs_koji_token.yml"
 
   roles:
   - {
@@ -111,6 +112,7 @@
           reactor_config_secret: 'reactor_config_secret',
           koji_certs_secret: 'kojisecret',
           token_secrets: 'x86-64-osbs:/var/run/secrets/atomic-reactor/x86-64-osbs',
+          token_file: '/etc/osbs/x86-64-osbs-stg-koji',
           namespace: 'osbs-fedora',
           can_orchestrate: true
         }

tasks/osbs_koji_token.yml

@@ -0,0 +1,9 @@
+---
+
+- name: put the koji token file in place
+  copy:
+    src: "{{ private }}/files/osbs/{{ env }}/x86-64-osbs-stg-koji"
+    dest: "/etc/osbs/x86-64-osbs-stg-koji"
+    owner: root
+    mode: 0400
+  when: env == "staging"