infra/ansible
22
7
Fork 57
Code Pull requests 7 Activity Actions

robosignatory: disable f43->f43 signing to process mass rebuild faster

Browse source 
Also, comment section we will need in a few weeks to resign all of f43
with f44 key for branching.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2025-07-27 08:47:31 -07:00
commit 0f1a3e91d3
1 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

12
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -179,12 +179,12 @@ handlers = ["console"]
keyid = "{{ (env == 'production')|ternary('31645531', 'd300e724') }}"
file_signing_key = "fedora-43-ima"
[[consumer_config.koji_instances.primary.tags]]
from = "f43"
to = "f43"
key = "{{ (env == 'production')|ternary('fedora-43', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('31645531', 'd300e724') }}"
file_signing_key = "fedora-43-ima"
# [[consumer_config.koji_instances.primary.tags]]
# from = "f43"
# to = "f43"
# key = "{{ (env == 'production')|ternary('fedora-44', 'testkey') }}"
# keyid = "{{ (env == 'production')|ternary('XXXXXXXX', 'd300e724') }}"
# file_signing_key = "fedora-44-ima"
# Branched