diff options
| author | Ralph Bean <rbean@redhat.com> | 2017-03-01 21:21:07 +0000 |
|---|---|---|
| committer | Ralph Bean <rbean@redhat.com> | 2017-03-01 21:21:07 +0000 |
| commit | 6f19824f20436872654fc7a45c5ce3e87f7f59a9 (patch) | |
| tree | 7ef0873c399f541c6ab598d5c427ba0edd39c1ce | |
| parent | cd0684d6c1de72d7bc1d6531d850cc6a3da7ae6d (diff) | |
| download | ansible-6f19824f20436872654fc7a45c5ce3e87f7f59a9.tar.gz ansible-6f19824f20436872654fc7a45c5ce3e87f7f59a9.tar.xz ansible-6f19824f20436872654fc7a45c5ce3e87f7f59a9.zip | |
Specify new MBS config values present in the latest release.
| -rw-r--r-- | roles/mbs/common/templates/config.py | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/roles/mbs/common/templates/config.py b/roles/mbs/common/templates/config.py index 31ed24882..ef9d80ca5 100644 --- a/roles/mbs/common/templates/config.py +++ b/roles/mbs/common/templates/config.py @@ -78,6 +78,14 @@ class BaseConfiguration(object): class ProdConfiguration(BaseConfiguration): DEBUG = False # Don't turn this on. + # These groups are allowed to submit builds. + ALLOWED_GROUPS = [ + 'factory2', + 'modularity-wg', + # Not allowed until FESCo approves us in the F27 timeframe. + #'packager', + ] + {% if env == 'staging' %} SECRET_KEY = '{{ mbs_stg_secret_key }}' SQLALCHEMY_DATABASE_URI = 'postgresql://mbs:{{mbs_stg_db_password}}@db-mbs/mbs' @@ -123,5 +131,14 @@ class ProdConfiguration(BaseConfiguration): SCMURLS = ["git://pkgs.fedoraproject.org/modules/"] {% endif %} + # This is a whitelist of prefixes of koji tags we're allowed to manipulate + KOJI_TAG_PREFIXES = ['modules'] + # These aren't really secret. OIDC_CLIENT_SECRETS = path.join(confdir, 'client_secrets.json') + + # yes, we want everyone to authenticate + NO_AUTH = False # Obviously. + + # Don't let people submit yaml directly. it has to come from dist-git + YAML_SUBMIT_ALLOWED = False |