Ship ssl certs for i18n and l10n.d.o

diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index 84d5d52..3ab5c9e 100644 (file)
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -184,3 +184,7 @@ roles:
     - mirror-isc.debian.org
   planet_search:
     - philp.debian.org
+  i18n.d.o:
+    - tye.debian.org
+  l10n.d.o:
+    - tye.debian.org

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index c436bac..c36e2d2 100644 (file)
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -298,4 +298,18 @@ class roles {
                        key => true,
                }
        }
+
+       if has_role('i18n.d.o') {
+               ssl::service { 'i18n.debian.org':
+                       notify => Service['apache2'],
+                       key => true,
+               }
+       }
+
+       if has_role('l10n.d.o') {
+               ssl::service { 'l10n.debian.org':
+                       notify => Service['apache2'],
+                       key => true,
+               }
+       }
 }