- hosts: "mirror-update:!disabled"
  name: "Configure mirror-update"
  roles:
    - role: iptables
    - role: kerberos-client
      kerberos_realm: 'OPENSTACK.ORG'
      kerberos_admin_server: 'kdc.openstack.org'
      kerberos_kdcs:
        - kdc03.openstack.org
        - kdc04.openstack.org
    - role: openafs-client
      openafs_client_cache_size: "{{ afs_client_cache_size | default(10000000) }}" # 10GiB
    - role: mirror-update