Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

update eln signing.

Browse source 
This should have changed at branching, but didn't. ;(

We also need to add in a entry for eln tagged builds to be signed and
put back/kept in the eln tag. This will allow robosignatory to resign
everything with the f38 keys. It can be removed after this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2022-09-06 08:32:46 -07:00
parent a4040b0af2
commit f02e9dd527
1 changed files with 17 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

27
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -408,26 +408,33 @@ handlers = ["console"]
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
from = "eln-signing-pending" from = "eln-signing-pending"
to = "eln-updates-testing-pending" to = "eln-updates-testing-pending"
key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-38', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
file_signing_key = "fedora-37-ima" file_signing_key = "fedora-38-ima"
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
from = "eln-modular-updates-candidate" from = "eln-modular-updates-candidate"
to = "eln-modular" to = "eln-modular"
key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-38', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
type = "modular" type = "modular"
file_signing_key = "fedora-37-ima" file_signing_key = "fedora-38-ima"
# ELN Mass Rebuild # ELN Mass Rebuild
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
from = "eln-rebuild" from = "eln-rebuild"
to = "eln-rebuild" to = "eln-rebuild"
key = "{{ (env == 'production')|ternary('fedora-37', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-38', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('5323552a', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
file_signing_key = "fedora-37-ima" file_signing_key = "fedora-38-ima"
[[consumer_config.koji_instances.primary.tags]]
from = "eln"
to = "eln"
key = "{{ (env == 'production')|ternary('fedora-38', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
file_signing_key = "fedora-38-ima"
# ELN Side tags # ELN Side tags
@ -436,7 +443,7 @@ handlers = ["console"]
from = '<sidetag>-signing-pending' from = '<sidetag>-signing-pending'
to = '<sidetag>-testing-pending' to = '<sidetag>-testing-pending'
trusted_taggers = ['bodhi'] trusted_taggers = ['bodhi']
file_signing_key = "fedora-37-ima" file_signing_key = "fedora-38-ima"
# openh264 signing # openh264 signing