From ff5eef242227a664f54f4d5e2a3bee7f4e80f80c Mon Sep 17 00:00:00 2001
From: Adam Miller <admiller@redhat.com>
Date: Thu, 30 Nov 2017 15:09:30 +0000
Subject: [PATCH] set releng-team group perms for container rebuild credentials
 in stage

Signed-off-by: Adam Miller <admiller@redhat.com>
---
 playbooks/groups/releng-compose.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/playbooks/groups/releng-compose.yml b/playbooks/groups/releng-compose.yml
index ef47bbca4a..8d00dfa373 100644
--- a/playbooks/groups/releng-compose.yml
+++ b/playbooks/groups/releng-compose.yml
@@ -93,12 +93,18 @@
     copy:
       src: "{{private}}/files/keytabs/{{env}}/releng"
       dest: /etc/krb5.releng.keytab
+      owner: root
+      group: "releng-team"
+      mode: 0640
     when: env == "staging"
 
   - name: copy releng ssh key for rebuild fedpkg/distgit pushes
     copy:
       src: "{{private}}/files/releng/sshkeys/container-rebuild-staging"
       dest: /etc/pki/releng
+      owner: root
+      group: "releng-team"
+      mode: 0640
     when: env == "staging"