koji_hub: use globs for coreos-continuous rules

This is easier to read and means we don't need to update it
for every new release.
This commit is contained in:
Dusty Mabe 2019-08-20 15:32:15 -04:00 committed by Pierre-Yves Chibon
parent fc736c27d1
commit 1f253486ee

View file

@ -92,8 +92,8 @@ tag =
has_perm autosign && fromtag *-candidate && package kernel shim grub2 fedora-release fedora-repos pesign :: allow
has_perm secure-boot && package kernel shim grub2 fedora-release fedora-repos pesign :: allow
# CoreOS continuous builds, https://pagure.io/releng/issue/8165
operation tag && tag f{{FedoraRawhideNumber}}-coreos-continuous f{{FedoraBranchedNumber}}-coreos-continuous f{{FedoraCycleNumber}}-coreos-continuous f{{FedoraPreviousCycleNumber}}-coreos-continuous && has_perm coreos-continuous :: allow
operation untag && fromtag f{{FedoraRawhideNumber}}-coreos-continuous f{{FedoraBranchedNumber}}-coreos-continuous f{{FedoraCycleNumber}}-coreos-continuous f{{FedoraPreviousCycleNumber}}-coreos-continuous && has_perm coreos-continuous :: allow
operation tag && tag f*-coreos-continuous && has_perm coreos-continuous :: allow
operation untag && fromtag f*-coreos-continuous && has_perm coreos-continuous :: allow
# CoreOS coreos-pool and intermediate signing tags as well
# as the coreos-release tag. https://pagure.io/releng/issue/8294
operation tag && tag coreos-pool f*-coreos-signing-pending coreos-release && has_perm coreos-continuous :: allow