Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Uncomment f37 tags

Browse source 
Update f39 key

Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
This commit is contained in:
Tomáš Hrčka 2023-02-08 20:49:38 +01:00
parent 549e5d3ace
commit ce8a92b311
1 changed files with 34 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

68
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -137,7 +137,7 @@ handlers = ["console"]
from = "f39-infra-candidate" from = "f39-infra-candidate"
to = "f39-infra-stg" to = "f39-infra-stg"
key = "{{ (env == 'production')|ternary('fedora-infra', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-infra', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
{% if env == "production" %} {% if env == "production" %}
# ima file signing - enabled in f37 # ima file signing - enabled in f37
file_signing_key = "fedora-39-ima" file_signing_key = "fedora-39-ima"
@ -175,7 +175,7 @@ handlers = ["console"]
from = "f39-coreos-signing-pending" from = "f39-coreos-signing-pending"
to = "coreos-pool" to = "coreos-pool"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
{% if env == "production" %} {% if env == "production" %}
# ima file signing - enabled in f37 # ima file signing - enabled in f37
file_signing_key = "fedora-39-ima" file_signing_key = "fedora-39-ima"
@ -187,7 +187,7 @@ handlers = ["console"]
from = "f39-signing-pending" from = "f39-signing-pending"
to = "f39-updates-testing-pending" to = "f39-updates-testing-pending"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
{% if env == "production" %} {% if env == "production" %}
# ima file signing - enabled in f37 # ima file signing - enabled in f37
file_signing_key = "fedora-39-ima" file_signing_key = "fedora-39-ima"
@ -207,7 +207,7 @@ handlers = ["console"]
from = "f39-pending" from = "f39-pending"
to = "f39" to = "f39"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
{% if env == "production" %} {% if env == "production" %}
# ima file signing - enabled in f37 # ima file signing - enabled in f37
file_signing_key = "fedora-39-ima" file_signing_key = "fedora-39-ima"
@ -217,14 +217,14 @@ handlers = ["console"]
from = "f39-modular-pending" from = "f39-modular-pending"
to = "f39-modular" to = "f39-modular"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
type = "modular" type = "modular"
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
from = "f39-modular-updates-candidate" from = "f39-modular-updates-candidate"
to = "f39-modular" to = "f39-modular"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
type = "modular" type = "modular"
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
@ -241,35 +241,35 @@ handlers = ["console"]
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
type = "modular" type = "modular"
#[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
#from = "f37-signing-pending" from = "f37-signing-pending"
#to = "f37-updates-testing-pending" to = "f37-updates-testing-pending"
#key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}"
#keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}"
#{% if env == "production" %} {% if env == "production" %}
## ima file signing - disable for now per fesco # ima file signing - disable for now per fesco
#file_signing_key = "fedora-37-ima" file_signing_key = "fedora-37-ima"
#{% endif %} {% endif %}
#[consumer_config.koji_instances.primary.tags.sidetags] [consumer_config.koji_instances.primary.tags.sidetags]
#pattern = 'f37-build-side-<seq_id>' pattern = 'f37-build-side-<seq_id>'
#from = '<sidetag>-signing-pending' from = '<sidetag>-signing-pending'
#to = '<sidetag>-testing-pending' to = '<sidetag>-testing-pending'
#trusted_taggers = ['bodhi'] trusted_taggers = ['bodhi']
#{% if env == "production" %} {% if env == "production" %}
## ima file signing - disable for now per fesco # ima file signing - disable for now per fesco
#file_signing_key = "fedora-37-ima" file_signing_key = "fedora-37-ima"
#{% endif %} {% endif %}
#[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
#from = "f37-pending" from = "f37-pending"
#to = "f37" to = "f37"
#key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}"
#keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}"
#{% if env == "production" %} {% if env == "production" %}
## ima file signing - disable for now per fesco # ima file signing - disable for now per fesco
#file_signing_key = "fedora-37-ima" file_signing_key = "fedora-37-ima"
#{% endif %} {% endif %}
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
from = "f37-modular-pending" from = "f37-modular-pending"
@ -435,7 +435,7 @@ handlers = ["console"]
from = "f39-openh264" from = "f39-openh264"
to = "f39-openh264" to = "f39-openh264"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
{% if env == "production" %} {% if env == "production" %}
# ima file signing - enabled in f37 # ima file signing - enabled in f37
file_signing_key = "fedora-39-ima" file_signing_key = "fedora-39-ima"