Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Add kerb to koji prod

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-10-13 17:47:25 +00:00
parent 65c74d2f4a
commit 5afc6bfc4e
2 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
roles/koji_hub/tasks/main.yml
View file

@ -82,7 +82,6 @@
# #
- name: install koji-hub keytab - name: install koji-hub keytab
when: env == "staging"
copy: src={{ private }}/files/keytabs/{{ env }}/koji-hub dest=/etc/koji-hub/koji-hub.keytab copy: src={{ private }}/files/keytabs/{{ env }}/koji-hub dest=/etc/koji-hub/koji-hub.keytab
owner=apache group=apache mode=0600 owner=apache group=apache mode=0600
notify: notify:

6
roles/koji_hub/templates/hub.conf.j2
View file

@ -20,13 +20,15 @@ KojiDir = /mnt/koji
MemoryWarnThreshold = 10000 MemoryWarnThreshold = 10000
MaxRequestLength = 83886080 MaxRequestLength = 83886080
{% if env == "staging" %}
# Kerb auth # Kerb auth
{% if env == "staging" %}
AuthPrincipal = host/koji.stg.fedoraproject.org AuthPrincipal = host/koji.stg.fedoraproject.org
{% else %}
AuthPrincipal = host/koji.fedoraproject.org
{% endif %}
AuthKeytab = /etc/koji-hub/koji-hub.keytab AuthKeytab = /etc/koji-hub/koji-hub.keytab
{% endif %}
## SSL client certificate auth configuration ## ## SSL client certificate auth configuration ##
#note: ssl auth may also require editing the httpd config (conf.d/kojihub.conf) #note: ssl auth may also require editing the httpd config (conf.d/kojihub.conf)