mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-05-12 02:46:20 +08:00
koji_hub: add policy for coreos signing pending tags
We tag into the signing-pending tags so that the builds can get signed before being moved into the coreos-pool tag. Allow for tagging into these signing-pending tags.
This commit is contained in:
committed by
Pierre-Yves Chibon
parent
63e7838328
commit
7aa452750b
@@ -159,8 +159,11 @@ package_list =
|
||||
tag *infra* && has_perm infra && match action add unblock block :: allow
|
||||
# CoreOS continuous builds, https://pagure.io/releng/issue/8165
|
||||
tag f{{FedoraRawhideNumber}}-coreos-continuous f{{FedoraBranchedNumber}}-coreos-continuous f{{FedoraCycleNumber}}-coreos-continuous f{{FedoraPreviousCycleNumber}}-coreos-continuous && has_perm coreos-continuous && match action add unblock block :: allow
|
||||
# CoreOS coreos-pool and coreos-release tags, https://pagure.io/releng/issue/8294
|
||||
tag coreos-pool coreos-release && has_perm coreos-continuous && match action add unblock block :: allow
|
||||
# CoreOS coreos-release tag https://pagure.io/releng/issue/8294
|
||||
tag coreos-release && has_perm coreos-continuous && match action add unblock block :: allow
|
||||
# CoreOS coreos-pool tag and intermediate signing tags that lead
|
||||
# to coreos-pool https://pagure.io/releng/issue/8294
|
||||
tag coreos-pool f{{FedoraRawhideNumber}}-coreos-signing-pending f{{FedoraBranchedNumber}}-coreos-signing-pending f{{FedoraCycleNumber}}-coreos-signing-pending f{{FedoraPreviousCycleNumber}}-coreos-signing-pending && has_perm coreos-continuous && match action add unblock block :: allow
|
||||
# Catch-all rule.
|
||||
all :: deny
|
||||
|
||||
|
||||
Reference in New Issue
Block a user