Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

autosign: setup to resign f39 packages with f40 key before branching

Browse source 
Branching of f39 is next week, so we need to resign most of everything
with the f40 key so rawhide can be signed after branching.
we will need to make another pass after this one is done.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2023-08-03 01:18:39 -07:00
parent 230e62e051
commit 4d76ccac6b
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -453,13 +453,13 @@ handlers = ["console"]
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
file_signing_key = "fedora-38-ima"
# f39 resigning
# f40 resigning
[[consumer_config.koji_instances.primary.tags]]
from = "f39"
to = "f39"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
file_signing_key = "fedora-39-ima"
key = "{{ (env == 'production')|ternary('fedora-40', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('a15B79cc', 'd300e724') }}"
file_signing_key = "fedora-40-ima"
# f39-python signing
[[consumer_config.koji_instances.primary.tags]]