kojiapi: add domain allowlist

This commit adds a domain allowlist which works the same way as the one
for remote workers.

To accept just w1.osbuild.org and w2.osbuild.org, use:

[koji]
domain_allowlist = [ "w1.osbuild.org", "w2.osbuild.org" ]
This commit is contained in:
Ondřej Budai 2020-09-21 12:17:56 +02:00 committed by Tom Gundersen
parent c9abb66637
commit 7fc3b47348
2 changed files with 5 additions and 0 deletions

View file

@ -1,3 +1,6 @@
[koji]
allowed_domains = [ "localhost", "*.osbuild.org" ]
[koji.servers.localhost.kerberos]
principal = "osbuild-krb@LOCAL"
keytab = "/etc/osbuild-composer/client.keytab"