Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

robosignatory: sign mass rebuild tag as builds happen

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2023-01-18 09:31:03 -08:00
parent f8f758be97
commit 296a5a4771
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -195,6 +195,16 @@ handlers = ["console"]
file_signing_key = "fedora-38-ima"
{% endif %}
[[consumer_config.koji_instances.primary.tags]]
from = "f38-rebuild"
to = "f38-rebuild"
key = "{{ (env == 'production')|ternary('fedora-38', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
{% if env == "production" %}
# ima file signing - enabled in f37
file_signing_key = "fedora-38-ima"
{% endif %}
[[consumer_config.koji_instances.primary.tags]]
from = "f38-modular-pending"
to = "f38-modular"