Declare message topics for bodhi2 in stg.

inventory/group_vars/bodhi2-stg

@@ -25,6 +25,10 @@ custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '
 
 fas_client_groups: sysadmin-noc
 
+# Mount /mnt/fedora_koji as read-only in staging
+nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid"
+datacenter: staging
+
 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
 - service: shell
@@ -33,7 +37,30 @@ fedmsg_certs:
 - service: bodhi
   owner: root
   group: bodhi
+  can_send:
+  - bodhi.buildroot_override.tag
+  - bodhi.buildroot_override.untag
+  - bodhi.stack.delete
+  - bodhi.stack.save
+  - bodhi.update.comment
+  - bodhi.update.complete.testing
+  - bodhi.update.edit
+  - bodhi.update.karma.threshold
+  - bodhi.update.request.obsolete
+  - bodhi.update.request.revoke
+  - bodhi.update.request.stable
+  - bodhi.update.request.testing
+  - bodhi.update.request.unpush
 
-# Mount /mnt/fedora_koji as read-only in staging
-nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid"
-datacenter: staging
+  # Things that only the mash does - not the web UI
+  #- bodhi.mashtask.complete
+  #- bodhi.mashtask.mashing
+  #- bodhi.mashtask.start
+  #- bodhi.mashtask.sync.done
+  #- bodhi.mashtask.sync.wait
+  #- bodhi.errata.publish
+  #- bodhi.update.eject
+
+  # Rsync messages that get run from somewhere else entirely.
+  #- bodhi.updates.epel.sync
+  #- bodhi.updates.fedora.sync