do not download cacert.pem, but generate it
This commit is contained in:
parent
94a373f448
commit
fa5718ad06
1 changed files with 7 additions and 5 deletions
|
@ -96,16 +96,18 @@
|
|||
- name: Obtain client_secrets.json
|
||||
get_url: url=https://pagure.io/fm-orchestrator/raw/master/f/conf/client_secrets.json dest=/etc/module-build-service/
|
||||
|
||||
# @TODO Should be packaged in module-build-service package? Or should already exist on copr-frontend instance?
|
||||
- name: Obtain cacert.pem
|
||||
get_url: url=https://pagure.io/fm-orchestrator/raw/master/f/conf/cacert.pem dest=/etc/module-build-service/cacert.pem
|
||||
|
||||
|
||||
- name: Upgrade database
|
||||
command: mbs-upgradedb
|
||||
|
||||
- name: Generate cert
|
||||
command: mbs-gencert
|
||||
args:
|
||||
creates: /etc/module-build-service/server.crt
|
||||
|
||||
- name: generate cacert.pem
|
||||
shell: cat /etc/module-build-service/server.crt /etc/module-build-service/server.key > /etc/module-build-service/cacert.pem
|
||||
args:
|
||||
creates: /etc/module-build-service/cacert.pem
|
||||
|
||||
- name: Chown /etc/module-build-service to mbs:mbs
|
||||
file: path=/etc/module-build-service owner=mbs group=mbs recurse=yes mode=g+w
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue