Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

ipsilon: change crypto policy back to default

Browse source 
Since https://pagure.io/fedora-infrastructure/issue/12321
is fixed on the bugzilla side, we should be able to move back
to using DEFAULT.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2025-03-10 10:36:19 -07:00 • committed by kevin
parent 2fd441aef6
commit b9eb773848
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/base/tasks/crypto-policies.yml
View file

@ -38,7 +38,7 @@
# see https://pagure.io/fedora-infrastructure/issue/12321
# This is needed to get SAML2 auth working with bugzilla.redhat.com
- name: Set crypto-policy on ipsilon servers to FEDORA40
command: "update-crypto-policies --set FEDORA40"
command: "update-crypto-policies --set DEFAULT"
when: "inventory_hostname.startswith('ipsilon') and (currentcryptopolicy.stdout.find('FEDORA40') == -1 or cryptopolicyapplied.rc != 0)"
check_mode: no
tags: