Add manage-container-images role to bodhi backend for container updates

Signed-off-by: Clement Verna <cverna@tutanota.com>

playbooks/groups/bodhi-backend.yml

@@ -68,6 +68,11 @@
     service: bodhi
     host: "bodhi.stg.fedoraproject.org"
     when: env == "staging"
+  - role: manage-container-images
+    cert_dest_dir: "/etc/docker/certs.d/registry{{ env_suffix }}.fedoraproject.org"
+    cert_src: "{{private}}/files/docker-registry/{{env}}/docker-registry-internal.pem"
+    key_src: "{{private}}/files/docker-registry/{{env}}/docker-registry-internal.key"
+    certs_group: apache
 
 
   tasks:

roles/manage-container-images/defaults/main.yml

@@ -0,0 +1,5 @@
+---
+# defaults file for manage-container-images
+#
+
+certs_group: "releng-team"

roles/manage-container-images/tasks/main.yml

@@ -18,12 +18,12 @@
     src: "{{cert_src}}"
     dest: "{{cert_dest_dir}}/client.cert"
     owner: root
-    group: "releng-team"
+    group: "{{ certs_group }}"
     mode: 0640
 
 - name: install docker client key for registry
   copy:
     src: "{{key_src}}"
     dest: "{{cert_dest_dir}}/client.key"
-    group: "releng-team"
+    group: "{{ certs_group }}"
     mode: 0640