Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

robosignatory: f40-rebuild auto signing mass rebuild tag as builds happen

Browse source 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
This commit is contained in:
Samyak Jain 2024-01-16 22:55:49 +05:30 • committed by kevin
parent dd12a25400
commit fc8920750b
1 changed files with 6 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

11
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -433,14 +433,15 @@ handlers = ["console"]
keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
file_signing_key = "fedora-39-ima" file_signing_key = "fedora-39-ima"
# F40 Mass Rebuild
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
from = "f39-rebuild" from = "f40-rebuild"
to = "f39-rebuild" to = "f40-rebuild"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-40', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('a15B79cc', 'd300e724') }}"
{% if env == "production" %} {% if env == "production" %}
# ima file signing - enabled in f37 # ima file signing - enabled in f37
file_signing_key = "fedora-39-ima" file_signing_key = "fedora-40-ima"
{% endif %} {% endif %}
[consumer_config.ostree_refs] [consumer_config.ostree_refs]