Use the new CA structure

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2018-08-22 17:35:29 +00:00
parent 417cb6e216
commit a70029174d
3 changed files with 2 additions and 21 deletions

View file

@ -1,22 +1,3 @@
- name: Copy over the Fedora Server CA cert
copy: src="{{ private }}/files/fedora-ca.cert" dest=/etc/pki/httpd/fedora-server-ca.cert
owner=root group=root mode=0644
notify:
- reload proxyhttpd
tags:
- fedora-web
- fedora-web/candidate-registry
- name: Copy over the registry CA
copy: src="{{private}}/files/docker-registry/{{env}}/docker-registry-ca.pem"
dest="/etc/pki/httpd/registry-ca-{{env}}.cert"
owner=root group=root mode=0644
notify:
- reload proxyhttpd
tags:
- fedora-web
- fedora-web/candidate-registry
- name: Copy over the registry passwd
copy: src="{{private}}/files/docker-registry/{{env}}/candidate-htpasswd" dest=/etc/httpd/conf.d/candidate-registry.fedoraproject.org/passwd
owner=root group=root mode=0644

View file

@ -1 +1 @@
/C=US/ST=North Carolina/O=Fedora Project/OU=Fedora Builders/CN=containerstable/emailAddress=buildsys@fedoraproject.org:xxj31ZMTZzkVA
/CN=containerstable:xxj31ZMTZzkVA

View file

@ -36,7 +36,7 @@
- fedora-web/registry
- name: Copy over the registry CA
copy: src="{{private}}/files/docker-registry/{{env}}/docker-registry-ca.pem"
copy: src="{{private}}/files/docker-registry/{{env}}/pki/ca.crt"
dest="/etc/pki/httpd/registry-ca-{{env}}.cert"
owner=root group=root mode=0644
notify: