swedenconnect/eid-ops
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Better to condition on HSM use than envrironment, SC-2670

Browse source
This commit is contained in:
Patrik Holmqvist 2025-02-26 15:12:17 +01:00
parent 62c2614b43
commit bcc9ec7833
Signed by: pahol
GPG key ID: 5D5B0D4E93F77273
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
global/overlay/etc/puppet/modules/eid/manifests/connector.pp
View file

@ -41,7 +41,8 @@ class eid::connector (
content => template("eid/connector/application-${environment}.yml.erb") content => template("eid/connector/application-${environment}.yml.erb")
} }
if ($environment == 'qa') { # If we dont use HSM, we need the keys on disk
if (unless $use_hsm) {
sunet::snippets::secret_file {"${connector_directory}/credentials/metadata.key": sunet::snippets::secret_file {"${connector_directory}/credentials/metadata.key":
hiera_key => 'eidas_metadata_key', hiera_key => 'eidas_metadata_key',
base64 => true base64 => true