Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

puppet: Make ksplice config not world-readable, use 'adm' group. 

This matches the configuration that ksplice itself creates the file
and directory with.
This commit is contained in:
Alex Vandiver 2021-02-26 14:49:02 -08:00 committed by Tim Abbott
parent 6f9f608225
commit a759d26a32
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
puppet/zulip_ops/manifests/ksplice_uptrack.pp
View File

@ -2,15 +2,15 @@ class zulip_ops::ksplice_uptrack {
file { '/etc/uptrack':
ensure => 'directory',
owner => 'root',
group => 'root',
mode => '0755',
group => 'adm',
mode => '0750',
}
$ksplice_access_key = zulipsecret('secrets','ksplice_access_key','')
file { '/etc/uptrack/uptrack.conf':
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
group => 'adm',
mode => '0640',
content => template('zulip_ops/uptrack/uptrack.conf.erb'),
}
$setup_apt_repo_file = "${::zulip_scripts_path}/lib/setup-apt-repo-ksplice"