Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

robosignatory: enable ima signing for f37

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2022-06-28 10:20:34 -07:00
parent 452726e175
commit da4c14967e
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -153,8 +153,8 @@ handlers = ["console"]
key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}"
{% if env == "production" %}
# ima file signing - disable for now per fesco
# file_signing_key = "fedora-files-2021"
# ima file signing - enabled in f37
file_signing_key = "fedora-37-ima"
{% endif %}
[consumer_config.koji_instances.primary.tags.sidetags]