Temporarily remove TLSA record for packages.qa and tracker

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index cf7bfb5..db9db67 100644 (file)
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -262,6 +262,7 @@ class roles {
        if has_role('packagesqamaster') {
                ssl::service { 'packages.qa.debian.org':
                        notify => Service['apache2'],
+                       tlsaport => [],
                }
        }
 

diff --git a/modules/roles/manifests/tracker.pp b/modules/roles/manifests/tracker.pp
index ed1eb70..749eb86 100644 (file)
--- a/modules/roles/manifests/tracker.pp
+++ b/modules/roles/manifests/tracker.pp
@@ -1,5 +1,6 @@
 class roles::tracker {
        ssl::service { 'tracker.debian.org':
                notify => Service['apache2'],
+               tlsaport => [],
        }
 }