infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

[f36-eol] Make changes to robosignatory for 36 eol

Browse source 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
This commit is contained in:
Samyak Jain 2023-05-16 15:52:26 +05:30
parent e77afa63ef
commit 725150cf6b
1 changed files with 0 additions and 61 deletions
Download patch file Download diff file Expand all files Collapse all files

61
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -113,12 +113,6 @@ handlers = ["console"]
key = "{{ (env == 'production')|ternary('fedora-infra', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-infra', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('47dd8ef9', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('47dd8ef9', 'd300e724') }}"
[[consumer_config.koji_instances.primary.tags]]
from = "f36-infra-candidate"
to = "f36-infra-stg"
key = "{{ (env == 'production')|ternary('fedora-infra', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('47dd8ef9', 'd300e724') }}"
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
from = "f37-infra-candidate" from = "f37-infra-candidate"
to = "f37-infra-stg" to = "f37-infra-stg"
@ -151,12 +145,6 @@ handlers = ["console"]
# Gated coreos-pool tag # Gated coreos-pool tag
[[consumer_config.koji_instances.primary.tags]]
from = "f36-coreos-signing-pending"
to = "coreos-pool"
key = "{{ (env == 'production')|ternary('fedora-36', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('38ab71f4', 'd300e724') }}"
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
from = "f37-coreos-signing-pending" from = "f37-coreos-signing-pending"
to = "coreos-pool" to = "coreos-pool"
@ -333,42 +321,6 @@ handlers = ["console"]
file_signing_key = "fedora-37-ima" file_signing_key = "fedora-37-ima"
{% endif %} {% endif %}
[[consumer_config.koji_instances.primary.tags]]
from = "f36-signing-pending"
to = "f36-updates-testing-pending"
key = "{{ (env == 'production')|ternary('fedora-36', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('38ab71f4', 'd300e724') }}"
{% if env == "production" %}
# ima file signing - disable for now per fesco
# file_signing_key = "fedora-files-2021"
{% endif %}
[consumer_config.koji_instances.primary.tags.sidetags]
pattern = 'f36-build-side-<seq_id>'
from = '<sidetag>-signing-pending'
to = '<sidetag>-testing-pending'
trusted_taggers = ['bodhi']
[[consumer_config.koji_instances.primary.tags]]
from = "f36-pending"
to = "f36"
key = "{{ (env == 'production')|ternary('fedora-36', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('38ab71f4', 'd300e724') }}"
[[consumer_config.koji_instances.primary.tags]]
from = "f36-modular-pending"
to = "f36-modular"
key = "{{ (env == 'production')|ternary('fedora-36', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('38ab71f4', 'd300e724') }}"
type = "modular"
[[consumer_config.koji_instances.primary.tags]]
from = "f36-modular-signing-pending"
to = "f36-modular-updates-testing-pending"
key = "{{ (env == 'production')|ternary('fedora-36', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('38ab71f4', 'd300e724') }}"
type = "modular"
# Gated bodhi updates # Gated bodhi updates
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
@ -493,12 +445,6 @@ handlers = ["console"]
file_signing_key = "fedora-37-ima" file_signing_key = "fedora-37-ima"
{% endif %} {% endif %}
[[consumer_config.koji_instances.primary.tags]]
from = "f36-openh264"
to = "f36-openh264"
key = "{{ (env == 'production')|ternary('fedora-36', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('38ab71f4', 'd300e724') }}"
# f38 resigning # f38 resigning
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
from = "f38" from = "f38"
@ -514,13 +460,6 @@ handlers = ["console"]
key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-39', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('18B8e74c', 'd300e724') }}"
file_signing_key = "fedora-39-ima" file_signing_key = "fedora-39-ima"
# f36-gnome
[[consumer_config.koji_instances.primary.tags]]
from = "f36-gnome"
to = "f36-gnome"
key = "{{ (env == 'production')|ternary('fedora-36', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('38ab71f4', 'd300e724') }}"
[consumer_config.ostree_refs] [consumer_config.ostree_refs]
[consumer_config.ostree_refs."fedora/rawhide/x86_64/iot"] [consumer_config.ostree_refs."fedora/rawhide/x86_64/iot"]