Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

robosignatory: sign f37-rebuild side tag, enable ima

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2022-07-20 14:33:36 -07:00
parent 16b5e17c19
commit c287d34d44
1 changed files with 6 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -388,12 +388,13 @@ handlers = ["console"]
key = "{{ (env == 'production')|ternary('fedora-35', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('9867c58f', 'd300e724') }}"
# f36-rebuild
# f37-rebuild
[[consumer_config.koji_instances.primary.tags]]
from = "f36-rebuild"
to = "f36-rebuild"
key = "{{ (env == 'production')|ternary('fedora-36', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('38ab71f4', 'd300e724') }}"
from = "f37-rebuild"
to = "f37-rebuild"
key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}"
file_signing_key = "fedora-37-ima"
# f36-gnome
[[consumer_config.koji_instances.primary.tags]]