infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Resign f42 builds with f43 key

Browse source 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
This commit is contained in:
Samyak Jain 2025-01-30 12:45:31 +05:30 • committed by jnsamyak
parent 93504347bf
commit fb06fb5d5c
1 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -179,12 +179,14 @@ handlers = ["console"]
keyid = "{{ (env == 'production')|ternary('105ef944', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('105ef944', 'd300e724') }}"
file_signing_key = "fedora-42-ima" file_signing_key = "fedora-42-ima"
# resigning f42 builds with f43 key before branching. Remove after branching.
[[consumer_config.koji_instances.primary.tags]] [[consumer_config.koji_instances.primary.tags]]
from = "f42" from = "f42"
to = "f42" to = "f42"
key = "{{ (env == 'production')|ternary('fedora-42', 'testkey') }}" key = "{{ (env == 'production')|ternary('fedora-43', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('105ef944', 'd300e724') }}" keyid = "{{ (env == 'production')|ternary('31645531', 'd300e724') }}"
file_signing_key = "fedora-42-ima" file_signing_key = "fedora-43-ima"
# Branched # Branched