From ba5f21fc48d354f2ae837ae4eba6f6a72d6b4c0d Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Fri, 29 Jul 2022 09:20:00 -0700
Subject: [PATCH] robosignatory: enable ima signing for eln

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 roles/robosignatory/templates/robosignatory.toml.j2 | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/roles/robosignatory/templates/robosignatory.toml.j2 b/roles/robosignatory/templates/robosignatory.toml.j2
index 2264dc1fb6..aec63a1e5e 100644
--- a/roles/robosignatory/templates/robosignatory.toml.j2
+++ b/roles/robosignatory/templates/robosignatory.toml.j2
@@ -332,6 +332,7 @@ handlers = ["console"]
             to = "eln-updates-testing-pending"
             key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}"
             keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}"
+            file_signing_key = "fedora-37-ima"
 
             [[consumer_config.koji_instances.primary.tags]]
             from = "eln-modular-updates-candidate"
@@ -339,6 +340,7 @@ handlers = ["console"]
             key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}"
             keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}"
             type = "modular"
+            file_signing_key = "fedora-37-ima"
 
             # ELN Mass Rebuild
 
@@ -347,6 +349,7 @@ handlers = ["console"]
             to = "eln-rebuild"
             key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}"
             keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}"
+            file_signing_key = "fedora-37-ima"
 
             # ELN Side tags
 
@@ -355,6 +358,7 @@ handlers = ["console"]
             from = '<sidetag>-signing-pending'
             to = '<sidetag>-testing-pending'
             trusted_taggers = ['bodhi']
+            file_signing_key = "fedora-37-ima"
 
             # openh264 signing