From 4ad6508bac9920b8df9792e515ef7185c4842ab7 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Mon, 30 Jun 2025 14:11:02 -0700
Subject: [PATCH] batcave: fix acls for dns repo

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 roles/batcave/tasks/main.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/roles/batcave/tasks/main.yml b/roles/batcave/tasks/main.yml
index ca6185de88..3bb32cc475 100644
--- a/roles/batcave/tasks/main.yml
+++ b/roles/batcave/tasks/main.yml
@@ -616,6 +616,11 @@
   - batcave
   - openshiftboot
 
+- name: Let the dns repo dir be writeable by sysadmin-dns
+  ansible.builtin.command: setfacl -R -m d:g:sysadmin-dns:rwx -m g:sysadmin-dns:rwx /srv/git/dns
+  tags:
+  - batcave
+  - dns
 
 #
 # install psql to allow for some ro queries against db-datanommer02