mozilla / normandy

Firefox recipe server
https://wiki.mozilla.org/Firefox/Recipe_Server
Mozilla Public License 2.0
55 stars 46 forks source link

Pass keyid into autograph #2354

Open jaredlockhart opened 8 months ago

jaredlockhart commented 8 months ago

Let's add an AUTOGRAPH_KEYID env var and then pass it into autograph when we call here: https://github.com/mozilla/normandy/blob/master/normandy/recipes/signing.py#L72

Pass it as keyid see autograph docs here: https://github.com/mozilla-services/autograph/blob/main/docs/endpoints.md#signdata

If the env var is not set, let's not pass it in the dict at all to fall back to the default key (as is currently the case) and then we can pass it if it's set.