Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

koji/hub: Enable package_list policy in production

Browse source
This commit is contained in:
Mikolaj Izdebski 2019-04-10 19:49:18 +02:00
parent 1668c1b41e
commit 9cb1e5c248
1 changed files with 1 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

10
roles/koji_hub/templates/hub.conf.j2
View file

@ -77,9 +77,8 @@ DisableNotifications = True
#Plugins = darkserver-plugin #Plugins = darkserver-plugin
Plugins = fedmsg-koji-plugin runroot_hub hub_containerbuild Plugins = fedmsg-koji-plugin runroot_hub hub_containerbuild
{% if inventory_hostname.startswith('koji') %}
[policy]
[policy]
tag = tag =
user mbs/mbs.fedoraproject.org && tag module-* && package kernel shim grub2 fedora-release fedora-repos pesign :: allow user mbs/mbs.fedoraproject.org && tag module-* && package kernel shim grub2 fedora-release fedora-repos pesign :: allow
@ -123,16 +122,11 @@ channel =
all :: use default all :: use default
build_from_srpm = build_from_srpm =
has_perm admin :: allow has_perm admin :: allow
tag *-infra-candidate && has_perm infra :: allow tag *-infra-candidate && has_perm infra :: allow
all :: deny all :: deny
{% endif %}
{% if env == 'staging' %}
# Policy for manipulating package lists for tags. # Policy for manipulating package lists for tags.
package_list = package_list =
@ -158,5 +152,3 @@ package_list =
tag f{{FedoraRawhideNumber}}-coreos-continuous f{{FedoraBranchedNumber}}-coreos-continuous f{{FedoraCycleNumber}}-coreos-continuous f{{FedoraPreviousCycleNumber}}-coreos-continuous && has_perm coreos-continuous && match action add unblock block :: allow tag f{{FedoraRawhideNumber}}-coreos-continuous f{{FedoraBranchedNumber}}-coreos-continuous f{{FedoraCycleNumber}}-coreos-continuous f{{FedoraPreviousCycleNumber}}-coreos-continuous && has_perm coreos-continuous && match action add unblock block :: allow
# Catch-all rule. # Catch-all rule.
all :: deny all :: deny
{% endif %}