distgit: give access to the fedora-messaging certs to the packager group

This solves the permission denied error packager would see otherwise
when pushing to dist-git as the hooks would fail to send notifications
on the fedora-messaging bus.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>

roles/distgit/pagure/tasks/main.yml

@@ -443,17 +443,17 @@
     - src: "{{private}}/files/rabbitmq/{{env}}/pki/issued/pagure{{ env_suffix }}.crt"
       dest: src.fp.o.crt
       owner: pagure
-      group: pagure
+      group: packager
       mode: "444"
     - src: "{{private}}/files/rabbitmq/{{env}}/pki/private/pagure{{ env_suffix }}.key"
       dest: src.fp.o.key
       owner: pagure
-      group: pagure
+      group: packager
       mode: "440"
     - src: "{{private}}/files/rabbitmq/{{env}}/pki/ca.crt"
       dest: src.fp.o.ca
       owner: pagure
-      group: pagure
+      group: packager
       mode: "444"
   tags:
   - pagure

roles/git/hooks/tasks/main.yml

@@ -54,17 +54,17 @@
   - src: "{{private}}/files/rabbitmq/{{ env }}/pki/issued/batcave{{ env_suffix }}.crt"
     dest: git-hooks.crt
     owner: root
-    group: root
+    group: packager
     mode: "444"
   - src: "{{private}}/files/rabbitmq/{{ env }}/pki/private/batcave{{ env_suffix }}.key"
     dest: git-hooks.key
     owner: root
-    group: root
+    group: packager
     mode: "440"
   - src: "{{private}}/files/rabbitmq/{{ env }}/pki/ca.crt"
     dest: git-hooks.ca
     owner: root
-    group: root
+    group: packager
     mode: "444"
   tags:
   - git