diff --git a/roles/releng/tasks/main.yml b/roles/releng/tasks/main.yml index 4f334821d3..0ae8c100de 100644 --- a/roles/releng/tasks/main.yml +++ b/roles/releng/tasks/main.yml @@ -133,6 +133,7 @@ - fedora-messaging # needed by pungi to emit fedora-messages. - python3-bugzilla # needed by ftbfs scrips/cron. - fedora-repo-zdicts # needed for pungi to make zchunk repodata + - fedrq # needed by `sig_policy` script tags: - releng @@ -205,6 +206,12 @@ copy: src="rawhide-iot" dest=/etc/cron.d/rawhide-iot when: inventory_hostname.startswith('compose-iot-01.iad2') +# put cron job in for enforcing FESCo SIG Policy +# https://docs.fedoraproject.org/en-US/fesco/SIG_policy/ +- name: sig_policy cron + template: src="sig_policy.j2" dest=/etc/cron.d/sig_policy + when: inventory_hostname.startswith('compose-x86-01.iad2') + - name: Create /etc/pki/fedora-messaging file: dest: /etc/pki/fedora-messaging diff --git a/roles/releng/templates/sig_policy.j2 b/roles/releng/templates/sig_policy.j2 new file mode 100644 index 0000000000..a76756825b --- /dev/null +++ b/roles/releng/templates/sig_policy.j2 @@ -0,0 +1,4 @@ +# Runs the `sig_policy.py` script +MAILTO=releng-cron@lists.fedoraproject.org +PAGURE_API_TOKEN={{ fesco-sig-policy-src-token }} +30 9 * * 1 root TMPDIR=`mktemp -d /tmp/sig_policy` && chmod 755 $TMPDIR && cd $TMPDIR && git clone https://pagure.io/releng.git && cd releng/scripts/fesco/sig-policy && python sig_policy.py