From 4d76ccac6be190b4b22b5191b880b64c4d599a07 Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Thu, 3 Aug 2023 01:18:39 -0700 Subject: [PATCH] autosign: setup to resign f39 packages with f40 key before branching Branching of f39 is next week, so we need to resign most of everything with the f40 key so rawhide can be signed after branching. we will need to make another pass after this one is done. Signed-off-by: Kevin Fenzi --- roles/robosignatory/templates/robosignatory.toml.j2 | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/roles/robosignatory/templates/robosignatory.toml.j2 b/roles/robosignatory/templates/robosignatory.toml.j2 index 437cebee87..22270aa9cc 100644 --- a/roles/robosignatory/templates/robosignatory.toml.j2 +++ b/roles/robosignatory/templates/robosignatory.toml.j2 @@ -453,13 +453,13 @@ handlers = ["console"] keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}" file_signing_key = "fedora-38-ima" - # f39 resigning + # f40 resigning [[consumer_config.koji_instances.primary.tags]] from = "f39" to = "f39" - key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}" - keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}" - file_signing_key = "fedora-39-ima" + key = "{{ (env == 'production')|ternary('fedora-40', 'testkey') }}" + keyid = "{{ (env == 'production')|ternary('a15B79cc', 'd300e724') }}" + file_signing_key = "fedora-40-ima" # f39-python signing [[consumer_config.koji_instances.primary.tags]]