[sysadmin-notify] [ansible] Better koji-hub policy

commit a8269fced7f90e1f51dc07fe885cf2c97fad13d7 Author: Nicolas Chauvet <kwizart(a)gmail.com&gt; Date: Tue Dec 11 15:28:44 2018 +0100 Better koji-hub policy roles/koji_hub/templates/hub.conf.j2 | 12 +++++++++++- 1 files changed, 11 insertions(+), 1 deletions(-) --- diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2 index 6481330..07c5ed8 100644 --- a/roles/koji_hub/templates/hub.conf.j2 +++ b/roles/koji_hub/templates/hub.conf.j2 @@ -75,7 +75,17 @@ tag = has_perm secure-boot && package kernel shim grub2 fedora-release fedora-repos pesign :: allow package kernel shim grub2 fedora-release fedora-repos pesign :: deny has_perm admin :: allow - all :: allow + tag *-updates || el*free :: { + operation move :: { + fromtag *-candidate :: deny + fromtag *-testing :: allow + all :: deny + } + operation tag && hastag *-candidate *-testing :: deny + } + tag *-override :: allow + tag *-candidate :: allow + all :: deny channel = method createrepo :: use createrepo