mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-05-12 10:56:20 +08:00
Add kerb to koji prod
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
@@ -82,7 +82,6 @@
|
||||
#
|
||||
|
||||
- name: install koji-hub keytab
|
||||
when: env == "staging"
|
||||
copy: src={{ private }}/files/keytabs/{{ env }}/koji-hub dest=/etc/koji-hub/koji-hub.keytab
|
||||
owner=apache group=apache mode=0600
|
||||
notify:
|
||||
|
||||
@@ -20,13 +20,15 @@ KojiDir = /mnt/koji
|
||||
MemoryWarnThreshold = 10000
|
||||
MaxRequestLength = 83886080
|
||||
|
||||
{% if env == "staging" %}
|
||||
# Kerb auth
|
||||
|
||||
{% if env == "staging" %}
|
||||
AuthPrincipal = host/koji.stg.fedoraproject.org
|
||||
{% else %}
|
||||
AuthPrincipal = host/koji.fedoraproject.org
|
||||
{% endif %}
|
||||
AuthKeytab = /etc/koji-hub/koji-hub.keytab
|
||||
|
||||
{% endif %}
|
||||
## SSL client certificate auth configuration ##
|
||||
#note: ssl auth may also require editing the httpd config (conf.d/kojihub.conf)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user