From 354cad343b1665af31aca1a932b8afe4450ea188 Mon Sep 17 00:00:00 2001
From: Jonathon Turel <jturel@gmail.com>
Date: Tue, 21 Jul 2020 22:27:21 -0400
Subject: [PATCH] Refs #30346 - allow override of candlepin client keypair
 group

---
 manifests/candlepin.pp | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/manifests/candlepin.pp b/manifests/candlepin.pp
index 2d6d8ec4..b2f69521 100644
--- a/manifests/candlepin.pp
+++ b/manifests/candlepin.pp
@@ -22,6 +22,7 @@
   $ca_key_password_file     = $certs::ca_key_password_file,
   $user                     = $certs::user,
   $group                    = 'tomcat',
+  $client_keypair_group     = 'tomcat',
 ) inherits certs {
 
   Exec {
@@ -125,11 +126,11 @@
       cert_file   => $client_cert,
       manage_cert => true,
       cert_owner  => $user,
-      cert_group  => $group,
+      cert_group  => $client_keypair_group,
       cert_mode   => '0440',
       manage_key  => true,
       key_owner   => $user,
-      key_group   => $group,
+      key_group   => $client_keypair_group,
       key_mode    => '0440',
     } ~>
     file { $truststore_password_path: