koji_builders: enable ipset for osbuild access in prod

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-07-28 16:47:55 -07:00 · 2022-07-28 16:47:55 -07:00 · 6898b5b35a
commit 6898b5b35a
parent 76fbf76d1b
1 changed files with 0 additions and 2 deletions
--- a/roles/base/templates/iptables/iptables.kojibuilder
+++ b/roles/base/templates/iptables/iptables.kojibuilder
@ -27,10 +27,8 @@
 {% endfor %}
 {% endif %}

-{% if host in groups['staging'] %}
 # osbuild api for osbuild koji plugin
 -A OUTPUT -p tcp --dport 443 -m set --match-set osbuildapi dst -j ACCEPT
-{% endif %}

 # kojipkgs
 {% if host in groups['buildvm_s390x'] %}