From 35df2de4c96ec10c30400713b16fb855965ad448 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Mon, 16 May 2022 13:01:09 -0700
Subject: [PATCH] bodhi: also allow ftpsync to use the bodhi fedora messaging
 cert

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 roles/bodhi2/backend/tasks/main.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/roles/bodhi2/backend/tasks/main.yml b/roles/bodhi2/backend/tasks/main.yml
index 34cc2b7aa0..9f1cef8d58 100644
--- a/roles/bodhi2/backend/tasks/main.yml
+++ b/roles/bodhi2/backend/tasks/main.yml
@@ -292,6 +292,12 @@
   - config
   - bodhi
 
+- name: Let the ftpsync user also read the fedora-messaging key
+  command: /usr/bin/setfacl -m user:ftpsync:rx /etc/pki/fedora-messaging/bodhi-key.pem
+  tags:
+  - config
+  - bodhi
+
 - name: make a mnt/koji link
   file: state=link src=/mnt/fedora_koji/koji dest=/mnt/koji force=yes
   tags: