From f3adb758c8f0556f65ec34f7a46dc6625819ccee Mon Sep 17 00:00:00 2001
From: Adam Williamson <awilliam@redhat.com>
Date: Thu, 10 Mar 2016 14:08:40 -0800
Subject: [PATCH] install fedmsg certs for openqa server hosts

---
 inventory/group_vars/openqa     | 20 ++++++++++++++++++++
 inventory/group_vars/openqa-stg | 23 +++++++++++++++++++++++
 2 files changed, 43 insertions(+)

diff --git a/inventory/group_vars/openqa b/inventory/group_vars/openqa
index dc941e4bee..4a1ce0b186 100644
--- a/inventory/group_vars/openqa
+++ b/inventory/group_vars/openqa
@@ -32,3 +32,23 @@ freezes: false
 
 # http and NFS
 tcp_ports: [ 80, 2049 ]
+
+# These are consumed by a task in roles/fedmsg/base/main.yml
+fedmsg_certs:
+- service: shell
+  owner: root
+  group: sysadmin
+  can_send:
+  - logger.log
+- service: openqa
+  owner: root
+  group: geekotest
+  can_send:
+  - openqa.job.create
+  - openqa.job.delete
+  - openqa.job.cancel
+  - openqa.job.duplicate
+  - openqa.job.restart
+  - openqa.jobs.restart
+  - openqa.job.update.result
+  - openqa.job.done
diff --git a/inventory/group_vars/openqa-stg b/inventory/group_vars/openqa-stg
index cc110ba9c3..d2717572da 100644
--- a/inventory/group_vars/openqa-stg
+++ b/inventory/group_vars/openqa-stg
@@ -39,3 +39,26 @@ freezes: false
 
 # http and NFS
 tcp_ports: [80, 2049]
+
+# These are consumed by a task in roles/fedmsg/base/main.yml
+fedmsg_certs:
+- service: shell
+  owner: root
+  group: sysadmin
+  can_send:
+  - logger.log
+- service: openqa
+  owner: root
+  group: geekotest
+  can_send:
+  - openqa.job.create
+  - openqa.job.delete
+  - openqa.job.cancel
+  - openqa.job.duplicate
+  - openqa.job.restart
+  - openqa.jobs.restart
+  - openqa.job.update.result
+  - openqa.job.done
+
+# makes sure it sends stg not prod fedmsgs
+fedmsg_env: stg