infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

autosign: switch eln to sign things already in it's tag with f39 key

Browse source 
This will allow us to resign everything with this new key.
Normal builds shouldn't be using it as they come via bodhi.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2023-02-07 16:49:02 -08:00
parent 0801e0fdd5
commit 337285c85f
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -397,8 +397,8 @@ handlers = ["console"]
[[consumer_config.koji_instances.primary.tags]]
from = "eln"
to = "eln"
key = "{{ (env == 'production')|ternary('fedora-38', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('eb10b464', 'd300e724') }}"
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
file_signing_key = "fedora-38-ima"
# ELN Side tags