infra/ansible
22
7
Fork 57
Code Pull requests 7 Activity Actions

robosignatory: also allow resigning f43 tagged packages with f44 key

Browse source 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
This commit is contained in:
Samyak Jain 2025-08-05 12:50:20 +05:30 • committed by jnsamyak
commit 8b7b4a8368
1 changed files with 7 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

13
roles/robosignatory/templates/robosignatory.toml.j2
View file

@ -179,12 +179,13 @@ handlers = ["console"]
keyid = "{{ (env == 'production')|ternary('31645531', 'd300e724') }}"
file_signing_key = "fedora-43-ima"
# [[consumer_config.koji_instances.primary.tags]]
# from = "f43"
# to = "f43"
# key = "{{ (env == 'production')|ternary('fedora-44', 'testkey') }}"
# keyid = "{{ (env == 'production')|ternary('XXXXXXXX', 'd300e724') }}"
# file_signing_key = "fedora-44-ima"
# resigning f43 builds with f44 key before branching. Remove after branching.
[[consumer_config.koji_instances.primary.tags]]
from = "f43"
to = "f43"
key = "{{ (env == 'production')|ternary('fedora-44', 'testkey') }}"
keyid = "{{ (env == 'production')|ternary('6d9f90a6', 'd300e724') }}"
file_signing_key = "fedora-44-ima"
# Branched