Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Badges: add the FM certs in the cronjobs

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2024-03-26 10:33:04 +01:00
parent 24b8b7a98e
commit e66b73760b
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
2 changed files with 36 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

18
roles/openshift-apps/badges/templates/cron-award.yml
View file

@ -35,6 +35,15 @@ spec:
- name: keytab-volume - name: keytab-volume
mountPath: /etc/keytabs mountPath: /etc/keytabs
readOnly: true readOnly: true
- name: fedora-messaging-ca-volume
mountPath: /etc/pki/fedora-messaging/ca
readOnly: true
- name: fedora-messaging-key-volume
mountPath: /etc/pki/fedora-messaging/key
readOnly: true
- name: fedora-messaging-crt-volume
mountPath: /etc/pki/fedora-messaging/crt
readOnly: true
env: env:
- name: FEDORA_MESSAGING_CONF - name: FEDORA_MESSAGING_CONF
value: "/etc/badges/fm-fedbadges.toml" value: "/etc/badges/fm-fedbadges.toml"
@ -51,4 +60,13 @@ spec:
- name: keytab-volume - name: keytab-volume
secret: secret:
secretName: fedbadges-keytab secretName: fedbadges-keytab
- name: fedora-messaging-ca-volume
secret:
secretName: fedora-messaging-ca
- name: fedora-messaging-key-volume
secret:
secretName: fedora-messaging-key
- name: fedora-messaging-crt-volume
secret:
secretName: fedora-messaging-crt
{% endfor %} {% endfor %}

18
roles/openshift-apps/badges/templates/cron-update-rules.yml
View file

@ -34,6 +34,15 @@ spec:
- name: keytab-volume - name: keytab-volume
mountPath: /etc/keytabs mountPath: /etc/keytabs
readOnly: true readOnly: true
- name: fedora-messaging-ca-volume
mountPath: /etc/pki/fedora-messaging/ca
readOnly: true
- name: fedora-messaging-key-volume
mountPath: /etc/pki/fedora-messaging/key
readOnly: true
- name: fedora-messaging-crt-volume
mountPath: /etc/pki/fedora-messaging/crt
readOnly: true
env: env:
- name: FEDORA_MESSAGING_CONF - name: FEDORA_MESSAGING_CONF
value: "/etc/badges/fm-fedbadges.toml" value: "/etc/badges/fm-fedbadges.toml"
@ -50,5 +59,14 @@ spec:
- name: keytab-volume - name: keytab-volume
secret: secret:
secretName: fedbadges-keytab secretName: fedbadges-keytab
- name: fedora-messaging-ca-volume
secret:
secretName: fedora-messaging-ca
- name: fedora-messaging-key-volume
secret:
secretName: fedora-messaging-key
- name: fedora-messaging-crt-volume
secret:
secretName: fedora-messaging-crt
securityContext: securityContext:
supplementalGroups: [1001050000] supplementalGroups: [1001050000]