Copy ODCS rabbitmq certs to /etc/odcs

roles/odcs/base/tasks/main.yml

@@ -196,3 +196,39 @@
   - odcs
   - odcs/backend
 
+- name: copy the odcs rabbitmq crt.
+  copy:
+    src: "{{private}}/files/rabbitmq/{{env}}/pki/issued/odcs-private-queue{{env_suffix}}.crt"
+    dest: /etc/odcs/odcs-private-queue.crt
+    owner: odcs
+    group: fedmsg
+    mode: 0640
+  tags:
+  - odcs
+  - odcs/backend
+  - odcs/frontend
+
+- name: copy the odcs rabbitmq key.
+  copy:
+    src: "{{private}}/files/rabbitmq/{{env}}/pki/private/odcs-private-queue{{env_suffix}}.key"
+    dest: /etc/odcs/odcs-private-queue.key
+    owner: odcs
+    group: fedmsg
+    mode: 0640
+  tags:
+  - odcs
+  - odcs/backend
+  - odcs/frontend
+
+- name: copy the odcs rabbitmq CA cert.
+  copy:
+    src: "{{private}}/files/rabbitmq/{{env}}/pki/ca.crt"
+    dest: /etc/odcs/ca.crt
+    owner: odcs
+    group: fedmsg
+    mode: 0640
+  tags:
+  - odcs
+  - odcs/backend
+  - odcs/frontend
+

roles/odcs/base/templates/etc/odcs/config.py.j2

@@ -155,9 +155,9 @@ class ProdConfiguration(BaseConfiguration):
 
     CELERY_BROKER_URL = "amqps://odcs-private-queue{{ env_suffix }}@rabbitmq01{{ env_suffix }}.phx2.fedoraproject.org/odcs"
     CELERY_CONFIG = {
-        'certfile': "{{private}}/files/rabbitmq/{{env}}/pki/issued/odcs-private-queue{{env_suffix}}.crt",
+        'certfile': "/etc/odcs/odcs-private-queue.crt",
-        'keyfile': "{{private}}/files/rabbitmq/{{env}}/pki/private/odcs-private-queue{{env_suffix}}.key",
+        'keyfile': "/etc/odcs/odcs-private-queue.key",
-        'ca_certs': "{{private}}/files/rabbitmq/{{env}}/pki/ca.crt",
+        'ca_certs': "/etc/odcs/ca.crt",
     }
 
 {% if odcs_celery_router_config %}