Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Adding perms to tag secure-boot packages to eln tags

Browse source 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
This commit is contained in:
Mohan Boddu 2020-06-18 13:57:47 -04:00 • committed by mohanboddu
parent d058b29071
commit ddc6fb16d6
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
roles/koji_hub/templates/hub.conf.j2
View file

@ -100,7 +100,10 @@ tag =
# as the coreos-release tag. https://pagure.io/releng/issue/8294 # as the coreos-release tag. https://pagure.io/releng/issue/8294
operation tag && tag coreos-pool f*-coreos-signing-pending coreos-release && has_perm coreos-continuous :: allow operation tag && tag coreos-pool f*-coreos-signing-pending coreos-release && has_perm coreos-continuous :: allow
operation untag && fromtag coreos-pool f*-coreos-signing-pending coreos-release && has_perm coreos-continuous :: allow operation untag && fromtag coreos-pool f*-coreos-signing-pending coreos-release && has_perm coreos-continuous :: allow
# deny tagging secureboot packages that are not related to coreos-continuous # eln and eln-rebuild builds, https://pagure.io/releng/issue/9538
operation tag && tag eln eln-rebuild && has_perm eln :: allow
operation untag && fromtag eln eln-rebuild && has_perm eln :: allow
# deny tagging secureboot packages that are not related to coreos-continuous and eln
package kernel shim grub2 pesign :: deny package kernel shim grub2 pesign :: deny
# Allow people to tag stuff into infra-candidate if they're infra # Allow people to tag stuff into infra-candidate if they're infra
tag *-infra-candidate && has_perm infra :: allow tag *-infra-candidate && has_perm infra :: allow