From d89691f61bac3773dce4da7a6f094e6d7f93b28d Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Thu, 22 Nov 2018 16:45:03 +0000
Subject: [PATCH] Set up deployment of the certs

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 roles/pagure/frontend/tasks/main.yml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/roles/pagure/frontend/tasks/main.yml b/roles/pagure/frontend/tasks/main.yml
index 70edf3df6f..eafc1a6362 100644
--- a/roles/pagure/frontend/tasks/main.yml
+++ b/roles/pagure/frontend/tasks/main.yml
@@ -259,6 +259,25 @@
   notify:
   - restart apache
 
+- name: Create the repoSpanner cert directory
+  file: /etc/pagure/repospanner state=directory mode=0640 owner=git group=git
+  tags:
+  - config
+  - pagure
+  - repospanner
+
+- name: Copy repoSpanner certs and keys
+  copy: src={{private}}/files/repoSpanner/{{env}}/ca/{{item}} dest=/etc/pagure/repospanner/{{item}}
+        owner=git group=git mode=0640
+  with_items:
+  - ca.crt
+  - ansible-push.crt
+  - ansible-push.key
+  tags:
+  - config
+  - pagure
+  - repospanner
+
 - name: create the database scheme
   command: /usr/bin/python2 /usr/share/pagure/pagure_createdb.py
   changed_when: "1 != 1"