Add cron job to enact FESCo SIG Policy

Signed-off-by: Patrik Polakovič <patrik@alphamail.org>

roles/releng/tasks/main.yml

@@ -133,6 +133,7 @@
     - fedora-messaging # needed by pungi to emit fedora-messages.
     - python3-bugzilla # needed by ftbfs scrips/cron.
     - fedora-repo-zdicts # needed for pungi to make zchunk repodata
+    - fedrq # needed by `sig_policy` script
   tags:
   - releng
 
@@ -205,6 +206,12 @@
   copy: src="rawhide-iot" dest=/etc/cron.d/rawhide-iot
   when: inventory_hostname.startswith('compose-iot-01.iad2')
 
+# put cron job in for enforcing FESCo SIG Policy
+# https://docs.fedoraproject.org/en-US/fesco/SIG_policy/
+- name: sig_policy cron
+  template: src="sig_policy.j2" dest=/etc/cron.d/sig_policy
+  when: inventory_hostname.startswith('compose-x86-01.iad2')
+
 - name: Create /etc/pki/fedora-messaging
   file:
     dest: /etc/pki/fedora-messaging

roles/releng/templates/sig_policy.j2

@@ -0,0 +1,4 @@
+# Runs the `sig_policy.py` script
+MAILTO=releng-cron@lists.fedoraproject.org
+PAGURE_API_TOKEN={{ fesco-sig-policy-src-token }}
+30 9 * * 1 root TMPDIR=`mktemp -d /tmp/sig_policy` && chmod 755 $TMPDIR && cd $TMPDIR && git clone https://pagure.io/releng.git && cd releng/scripts/fesco/sig-policy && python sig_policy.py