Freeze Break Request - give compose fedmsg certs to s390-koji01

[Ralph Bean]

The s390 koji hub was rebuilt and ansibilized shortly before freeze
set in.  It had a fedmsg_certs dictionary defined in the koji ansible
group which gave it the certs it needed for koji stuff, but it was
missing an extra cert definition for the compose process it carries
out.

This patch over writes that original var with a setup specific to the
s390 node.

Can I get two +1s to push this out?


diff --git a/inventory/host_vars/s390-koji01.qa.fedoraproject.org b/inventory/host_vars/s390-koji01.qa.fedoraproject.org
index 795fa9f..e355230 100644
--- a/inventory/host_vars/s390-koji01.qa.fedoraproject.org
+++ b/inventory/host_vars/s390-koji01.qa.fedoraproject.org
@@ -34,3 +34,41 @@ koji_server_url: "http://s390.koji.fedoraproject.org/kojihub"
 koji_weburl: "http://s390.koji.fedoraproject.org/koji"
 
 fedmsg_koji_instance: s390
+
+# Overload the fedmsg_certs definition from the ansible koji group, since the
+# s390 hub *also* does compose stuff, not just koji stuff.
+fedmsg_certs:
+- service: shell
+  owner: root
+  group: sysadmin
+- service: koji
+  owner: root
+  group: apache
+  can_send:
+  - buildsys.build.state.change
+  - buildsys.package.list.change
+  - buildsys.repo.done
+  - buildsys.repo.init
+  - buildsys.rpm.sign
+  - buildsys.tag
+  - buildsys.task.state.change
+  - buildsys.untag
+- service: bodhi
+  owner: root
+  group: masher
+  can_send:
+  - compose.branched.complete
+  - compose.branched.mash.complete
+  - compose.branched.mash.start
+  - compose.branched.pungify.complete
+  - compose.branched.pungify.start
+  - compose.branched.rsync.complete
+  - compose.branched.rsync.start
+  - compose.branched.start
+  - compose.epelbeta.complete
+  - compose.rawhide.complete
+  - compose.rawhide.mash.complete
+  - compose.rawhide.mash.start
+  - compose.rawhide.rsync.complete
+  - compose.rawhide.rsync.start
+  - compose.rawhide.start
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20150803/d8ab93fb/attachment.sig>