infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

robosignatory: fix up config for f38/f39/eln

Browse source 
Added some comments, made sure all releases had the needed config.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2023-02-09 11:56:56 -08:00
parent f450173400
commit a1463e1b3e
1 changed files with 50 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

60
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -107,6 +107,12 @@ handlers = ["console"]
key = "{{ (env == 'production')|ternary('fedora-infra', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('47dd8ef9', 'd300e724') }}"
[[consumer_config.koji_instances.primary.tags]]
from = "epel9-infra-candidate"
to = "epel9-infra-stg"
key = "{{ (env == 'production')|ternary('fedora-infra', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('47dd8ef9', 'd300e724') }}"
[[consumer_config.koji_instances.primary.tags]]
from = "f36-infra-candidate"
to = "f36-infra-stg"
@ -181,7 +187,7 @@ handlers = ["console"]
file_signing_key = "fedora-39-ima"
{% endif %}
# Gated rawhide and branched
# Gated rawhide
[[consumer_config.koji_instances.primary.tags]]
from = "f39-signing-pending"
@ -227,6 +233,38 @@ handlers = ["console"]
keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
type = "modular"
# Branched
[[consumer_config.koji_instances.primary.tags]]
from = "f38-signing-pending"
to = "f38-updates-testing-pending"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
{% if env == "production" %}
# ima file signing - enabled in f37
file_signing_key = "fedora-38-ima"
{% endif %}
[consumer_config.koji_instances.primary.tags.sidetags]
pattern = 'f38-build-side-<seq_id>'
from = '<sidetag>-signing-pending'
to = '<sidetag>-testing-pending'
trusted_taggers = ['bodhi']
{% if env == "production" %}
# ima file signing - enabled in f37
file_signing_key = "fedora-38-ima"
{% endif %}
[[consumer_config.koji_instances.primary.tags]]
from = "f38-pending"
to = "f38"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
{% if env == "production" %}
# ima file signing - enabled in f37
file_signing_key = "fedora-38-ima"
{% endif %}
[[consumer_config.koji_instances.primary.tags]]
from = "f38-modular-pending"
to = "f38-modular"
@ -241,6 +279,8 @@ handlers = ["console"]
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
type = "modular"
# stable releases
[[consumer_config.koji_instances.primary.tags]]
from = "f37-signing-pending"
to = "f37-updates-testing-pending"
@ -392,25 +432,25 @@ handlers = ["console"]
[[consumer_config.koji_instances.primary.tags]]
from = "eln-signing-pending"
to = "eln-updates-testing-pending"
key = "{{ (env == 'production')|ternary('fedora-38', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
file_signing_key = "fedora-38-ima"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
file_signing_key = "fedora-39-ima"
[[consumer_config.koji_instances.primary.tags]]
from = "eln-modular-updates-candidate"
to = "eln-modular"
key = "{{ (env == 'production')|ternary('fedora-38', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
type = "modular"
file_signing_key = "fedora-38-ima"
file_signing_key = "fedora-39-ima"
# ELN Mass Rebuild
[[consumer_config.koji_instances.primary.tags]]
from = "eln-rebuild"
to = "eln-rebuild"
key = "{{ (env == 'production')|ternary('fedora-38', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
file_signing_key = "fedora-38-ima"
[[consumer_config.koji_instances.primary.tags]]
@ -427,7 +467,7 @@ handlers = ["console"]
from = '<sidetag>-signing-pending'
to = '<sidetag>-testing-pending'
trusted_taggers = ['bodhi']
file_signing_key = "fedora-38-ima"
file_signing_key = "fedora-39-ima"
# openh264 signing