Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

koji_hub: add policy for coreos signing pending tags

Browse source 
We tag into the signing-pending tags so that the builds
can get signed before being moved into the coreos-pool tag.
Allow for tagging into these signing-pending tags.
This commit is contained in:
Dusty Mabe 2019-08-20 11:19:31 -04:00 • committed by Pierre-Yves Chibon
parent 63e7838328
commit 7aa452750b
1 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
roles/koji_hub/templates/hub.conf.j2
View file

@ -159,8 +159,11 @@ package_list =
tag *infra* && has_perm infra && match action add unblock block :: allow
# CoreOS continuous builds, https://pagure.io/releng/issue/8165
tag f{{FedoraRawhideNumber}}-coreos-continuous f{{FedoraBranchedNumber}}-coreos-continuous f{{FedoraCycleNumber}}-coreos-continuous f{{FedoraPreviousCycleNumber}}-coreos-continuous && has_perm coreos-continuous && match action add unblock block :: allow
# CoreOS coreos-pool and coreos-release tags, https://pagure.io/releng/issue/8294
tag coreos-pool coreos-release && has_perm coreos-continuous && match action add unblock block :: allow
# CoreOS coreos-release tag https://pagure.io/releng/issue/8294
tag coreos-release && has_perm coreos-continuous && match action add unblock block :: allow
# CoreOS coreos-pool tag and intermediate signing tags that lead
# to coreos-pool https://pagure.io/releng/issue/8294
tag coreos-pool f{{FedoraRawhideNumber}}-coreos-signing-pending f{{FedoraBranchedNumber}}-coreos-signing-pending f{{FedoraCycleNumber}}-coreos-signing-pending f{{FedoraPreviousCycleNumber}}-coreos-signing-pending && has_perm coreos-continuous && match action add unblock block :: allow
# Catch-all rule.
all :: deny