From 46b327807fe13ec623c9ea90741d80427bd67cb1 Mon Sep 17 00:00:00 2001 From: Pierre-Yves Chibon Date: Mon, 15 Jun 2020 13:56:38 +0200 Subject: [PATCH] distgit: turn on fedora-messaging notification and give apache access to the git hook cert and keys Signed-off-by: Pierre-Yves Chibon --- roles/distgit/files/dist-git.conf | 2 ++ roles/distgit/tasks/main.yml | 12 ++++++++++++ 2 files changed, 14 insertions(+) diff --git a/roles/distgit/files/dist-git.conf b/roles/distgit/files/dist-git.conf index 85ce6eeda8..eae7d8c3a6 100644 --- a/roles/distgit/files/dist-git.conf +++ b/roles/distgit/files/dist-git.conf @@ -14,3 +14,5 @@ default_namespace = rpms [upload] fedmsgs = False nomd5 = True +fedora_messaging = True +fedora_messaging_config = '/etc/fedora-messaging/git-hooks-messaging.toml' diff --git a/roles/distgit/tasks/main.yml b/roles/distgit/tasks/main.yml index 3255d66e1a..500c0ce5ea 100644 --- a/roles/distgit/tasks/main.yml +++ b/roles/distgit/tasks/main.yml @@ -138,6 +138,18 @@ - config - distgit +- name: Make sure apache can access the fedora-messasing keys + acl: + path: {{ item }} + with_items: + - /etc/pki/rabbitmq/git-hooks.ca + - /etc/pki/rabbitmq/git-hooks.crt + - /etc/pki/rabbitmq/git-hooks.key + entity: apache + etype: group + permissions: r + state: present + - name: create the distgit root directory (/srv/git) file: dest=/srv/git state=directory mode=0755 tags: