Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

puppet: Make ksplice config not world-readable, use 'adm' group. 

This matches the configuration that ksplice itself creates the file
and directory with.
This commit is contained in:
Alex Vandiver 2021-02-26 14:49:02 -08:00 committed by Tim Abbott
parent 6f9f608225
commit a759d26a32
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
puppet/zulip_ops/manifests/ksplice_uptrack.pp
View File

@ -2,15 +2,15 @@ class zulip_ops::ksplice_uptrack {
file { '/etc/uptrack': file { '/etc/uptrack':
ensure => 'directory', ensure => 'directory',
owner => 'root', owner => 'root',
group => 'root', group => 'adm',
mode => '0755', mode => '0750',
} }
$ksplice_access_key = zulipsecret('secrets','ksplice_access_key','') $ksplice_access_key = zulipsecret('secrets','ksplice_access_key','')
file { '/etc/uptrack/uptrack.conf': file { '/etc/uptrack/uptrack.conf':
ensure => file, ensure => file,
owner => 'root', owner => 'root',
group => 'root', group => 'adm',
mode => '0644', mode => '0640',
content => template('zulip_ops/uptrack/uptrack.conf.erb'), content => template('zulip_ops/uptrack/uptrack.conf.erb'),
} }
$setup_apt_repo_file = "${::zulip_scripts_path}/lib/setup-apt-repo-ksplice" $setup_apt_repo_file = "${::zulip_scripts_path}/lib/setup-apt-repo-ksplice"