From 03001f765ff866fa23a529fe40c15a174cbe70ad Mon Sep 17 00:00:00 2001 From: Fabian Arrotin Date: Oct 10 2022 09:41:53 +0000 Subject: Modified sop for fedora infra hosted tls service, like mirrors.centos.org Signed-off-by: Fabian Arrotin --- diff --git a/docs/security/tls.md b/docs/security/tls.md index ade4ed5..1dab93f 100644 --- a/docs/security/tls.md +++ b/docs/security/tls.md @@ -256,5 +256,6 @@ Once done : ansible-playbook-stream playbooks/role-haproxy.yml --tags "tls,pki" ``` -Also worth knowing that we have to contact Fedora Infra team for the `mirrors.centos.org` one, as it's hosted on their infra so we need to securely transfer needed key/cert files so that they can reload on their setup (mirrormanager) +!!! note + Fedora Infra team is responsiblef for `mirrors.centos.org` one, as it's hosted on their infra. In the past we were generating/renewing cert but it seems now [automated](https://pagure.io/fedora-infrastructure/issue/10829)