Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

robosignatory: fix typo and add resigning

Browse source 
There was a typo and we were resigning eln with f38 ima key instead of
f39 one. ;( Fixed

Also added f38/f39 retag signing so we can get everything signed with
the right keys.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2023-02-08 13:29:47 -08:00
parent cbd4238536
commit f391d8dd45
1 changed files with 20 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

32
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -418,7 +418,7 @@ handlers = ["console"]
to = "eln"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
file_signing_key = "fedora-38-ima"
file_signing_key = "fedora-39-ima"
# ELN Side tags
@ -428,9 +428,9 @@ handlers = ["console"]
to = '<sidetag>-testing-pending'
trusted_taggers = ['bodhi']
file_signing_key = "fedora-38-ima"
# openh264 signing
[[consumer_config.koji_instances.primary.tags]]
from = "f39-openh264"
to = "f39-openh264"
@ -440,7 +440,7 @@ handlers = ["console"]
# ima file signing - enabled in f37
file_signing_key = "fedora-39-ima"
{% endif %}
[[consumer_config.koji_instances.primary.tags]]
from = "f38-openh264"
to = "f38-openh264"
@ -450,7 +450,7 @@ handlers = ["console"]
# ima file signing - enabled in f37
file_signing_key = "fedora-38-ima"
{% endif %}
[[consumer_config.koji_instances.primary.tags]]
from = "f37-openh264"
to = "f37-openh264"
@ -468,13 +468,21 @@ handlers = ["console"]
keyid = "{{ (env == 'production')|ternary('38ab71f4', 'd300e724') }}"
# f38 resigning
#[[consumer_config.koji_instances.primary.tags]]
#from = "f38"
#to = "f38"
#key = "{{ (env == 'production')|ternary('fedora-38', 'testkey') }}"
#keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
#file_signing_key = "fedora-38-ima"
[[consumer_config.koji_instances.primary.tags]]
from = "f38"
to = "f38"
key = "{{ (env == 'production')|ternary('fedora-38', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
file_signing_key = "fedora-38-ima"
# f39 resigning
[[consumer_config.koji_instances.primary.tags]]
from = "f39"
to = "f39"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
file_signing_key = "fedora-39-ima"
# f36-gnome
[[consumer_config.koji_instances.primary.tags]]
from = "f36-gnome"