From 1c2e14769c949b22526a173ee8ca503580501548 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Feb 06 2024 20:12:50 +0000
Subject: koji / hub: deny any tagging for draft builds currently


Signed-off-by: Kevin Fenzi <kevin@scrye.com>

---

diff --git a/roles/ipa/server/files/data-only-backup.sh b/roles/ipa/server/files/data-only-backup.sh
index c7f9cf4..e5418cf 100755
--- a/roles/ipa/server/files/data-only-backup.sh
+++ b/roles/ipa/server/files/data-only-backup.sh
@@ -2,7 +2,7 @@
 
 # Run data only backups daily and only keep a certain number of old backups.
 
-KEEP=14
+KEEP=7
 
 ls -1d /var/lib/ipa/backup/ipa-data-* | head -n -${KEEP} | xargs rm -rf
 /usr/sbin/ipa-backup --data --online --quiet
diff --git a/roles/koji_hub/templates/hub.conf.j2 b/roles/koji_hub/templates/hub.conf.j2
index 08493b8..66ba489 100644
--- a/roles/koji_hub/templates/hub.conf.j2
+++ b/roles/koji_hub/templates/hub.conf.j2
@@ -95,6 +95,8 @@ Plugins = osbuild koji-fedoramessaging runroot_hub hub_containerbuild tag2distre
 [policy]
 
 tag =
+    # We don't want to allow any draft builds to be tagged yet
+    is_draft :: deny
     user mbs/mbs.fedoraproject.org && tag module-* && package kernel shim grub2 pesign fwupd fwupd-efi :: allow
     user mbs/mbs.fedoraproject.org && fromtag module-* && package kernel shim grub2 pesign fwupd fwupd-efi:: allow
     user bodhi && tag *-override && package kernel shim grub2 pesign fwupd fwupd-efi :: allow