Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

autosign: this should be autosign02 in prod now

Browse source 
Just use the short inventory name here so it works in prod and stg.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2024-01-30 09:53:19 -08:00
parent c764d1ea86
commit 0bb87a53e2
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -87,8 +87,8 @@ handlers = ["console"]
[consumer_config.koji_instances.primary.options]
# Only ssl and kerberos are supported at the moment
authmethod = "kerberos"
principal = "autosign/autosign01{{ env_suffix }}.{{datacenter}}.fedoraproject.org@{% if env != 'production' %}STG.{% endif %}FEDORAPROJECT.ORG"
keytab = "/etc/krb5.autosign_autosign01{{ env_suffix }}.{{datacenter}}.fedoraproject.org.keytab"
principal = "autosign/{{ inventory_hostname_short }}{{ env_suffix }}.{{datacenter}}.fedoraproject.org@{% if env != 'production' %}STG.{% endif %}FEDORAPROJECT.ORG"
keytab = "/etc/krb5.autosign_{{ inventory_hostname_short }}{{ env_suffix }}.{{datacenter}}.fedoraproject.org.keytab"
krb_rdns = false
# Temporary tags