From 6898b5b35acd42e93b0ad720e22b5ac3544d58de Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Thu, 28 Jul 2022 16:47:55 -0700
Subject: [PATCH] koji_builders: enable ipset for osbuild access in prod

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 roles/base/templates/iptables/iptables.kojibuilder | 2 --
 1 file changed, 2 deletions(-)

diff --git a/roles/base/templates/iptables/iptables.kojibuilder b/roles/base/templates/iptables/iptables.kojibuilder
index def2052dbd..4d8d0036ea 100644
--- a/roles/base/templates/iptables/iptables.kojibuilder
+++ b/roles/base/templates/iptables/iptables.kojibuilder
@@ -27,10 +27,8 @@
 {% endfor %}
 {% endif %}
 
-{% if host in groups['staging'] %}
 # osbuild api for osbuild koji plugin
 -A OUTPUT -p tcp --dport 443 -m set --match-set osbuildapi dst -j ACCEPT
-{% endif %}
 
 # kojipkgs
 {% if host in groups['buildvm_s390x'] %}