Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

robosignatory: Enable file signing for Rawhide

Browse source 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2021-01-14 17:45:29 +01:00
parent db96e95ded
commit 2ad7472720
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -75,6 +75,7 @@ handlers = ["console"]
backend = "sigul" backend = "sigul"
user = "autopen" user = "autopen"
passphrase_file = "/etc/sigul/autosign.pass" passphrase_file = "/etc/sigul/autosign.pass"
file_signing_key_passphrase_file = "/etc/sigul/autosign.pass"
config_file = "/etc/sigul/client.conf" config_file = "/etc/sigul/client.conf"
[consumer_config.koji_instances] [consumer_config.koji_instances]
@ -158,6 +159,9 @@ handlers = ["console"]
to = "f34-updates-testing-pending" to = "f34-updates-testing-pending"
key = "{{ (env == 'production')|ternary('fedora-34', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-34', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('45719a39', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('45719a39', 'd300e724') }}"
{% if env == "production" %}
file_signing_key = "fedora-files-2021"
{% endif %}
[consumer_config.koji_instances.primary.tags.sidetags] [consumer_config.koji_instances.primary.tags.sidetags]
pattern = 'f34-build-side-<seq_id>' pattern = 'f34-build-side-<seq_id>'