Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Fix ownership of the certs for pagure and koji

Browse source 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
Pierre-Yves Chibon 2019-03-04 16:46:07 +01:00
parent aeaadd525e
commit 48fdb8060e
2 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/distgit/pagure/tasks/main.yml
View file

@ -388,15 +388,15 @@
with_items: with_items:
- src: "{{private}}/files/rabbitmq/{{env}}/pki/issued/pagure{{ env_suffix }}.crt" - src: "{{private}}/files/rabbitmq/{{env}}/pki/issued/pagure{{ env_suffix }}.crt"
dest: src.fp.o.crt dest: src.fp.o.crt
owner: root owner: pagure
mode: 0644 mode: 0644
- src: "{{private}}/files/rabbitmq/{{env}}/pki/private/pagure{{ env_suffix }}.key" - src: "{{private}}/files/rabbitmq/{{env}}/pki/private/pagure{{ env_suffix }}.key"
dest: src.fp.o.key dest: src.fp.o.key
owner: root owner: pagure
mode: "600" mode: "600"
- src: "{{private}}/files/rabbitmq/{{env}}/pki/ca.crt" - src: "{{private}}/files/rabbitmq/{{env}}/pki/ca.crt"
dest: src.fp.o.ca dest: src.fp.o.ca
owner: root owner: pagure
mode: 0644 mode: 0644
tags: tags:
- pagure - pagure

6
roles/koji_hub/tasks/main.yml
View file

@ -131,15 +131,15 @@
with_items: with_items:
- src: "{{private}}/files/rabbitmq/{{env}}/pki/issued/koji{{ env_suffix }}.crt" - src: "{{private}}/files/rabbitmq/{{env}}/pki/issued/koji{{ env_suffix }}.crt"
dest: koji.crt dest: koji.crt
owner: root owner: apache
mode: 0644 mode: 0644
- src: "{{private}}/files/rabbitmq/{{env}}/pki/private/koji{{ env_suffix }}.key" - src: "{{private}}/files/rabbitmq/{{env}}/pki/private/koji{{ env_suffix }}.key"
dest: koji.key dest: koji.key
owner: root owner: apache
mode: "600" mode: "600"
- src: "{{private}}/files/rabbitmq/{{env}}/pki/ca.crt" - src: "{{private}}/files/rabbitmq/{{env}}/pki/ca.crt"
dest: koji.ca dest: koji.ca
owner: root owner: apache
mode: 0644 mode: 0644
tags: tags:
- config - config