- hosts: "mirror-update:!disabled"
  name: "Configure mirror-update"
  roles:
    - role: kerberos-client
      kerberos_realm: 'OPENSTACK.ORG'
      kerberos_admin_server: 'kdc.openstack.org'
      kerberos_kdcs:
        - kdc03.openstack.org
        - kdc04.openstack.org
    - role: openafs-client
    - role: mirror-update