releng

#8390 Add permission to untag kernels in coreos tags
Closed: Fixed by mohanboddu. Opened by dustymabe.

Closed: Fixed
Reopen Issue
  • Describe the issue

There is a set of permissions for some users to operate on coreos tags. We can tag a kernel into these tags but we get an error when trying to untag a kernel. We need to add this permission to our set of permissions.

The change was implemented in commit 76b7c06 in ansible.git

thank you!

acutally @mizdebsk - can you add one more permission for us?

$ koji remove-pkg coreos-pool mantle cowsay htop coreutils selinux-policy
2019-05-29 11:21:50,479 [ERROR] koji: ActionNotAllowed: policy violation (package_list)

@dustymabe package removal is never possible, even in regular fedora (except for admins that too a force operation). You can untag all the builds for it, but never really remove packages.

Why do you want it?
Edited by mohanboddu

@dustymabe package removal is never possible, even in regular fedora (except for admins that too a force operation). You can untag all the builds for it, but never really remove packages.
Why do you want it?

I was performing tests and added a few packages to the tag that aren't core packages - I wanted to remove them to clean things up

Package removal is discouraged and it is not allowed by design. You should block packages instead. Blocking has similar effect to removal and you should already have permission to do so. Unlike blocking, removal may have unwanted effects in cases with tag inheritance.

OK. yeah it doens't really hurt anything so I'll just leave them. Was just surprised when it didn't work. Thanks @mizdebsk

Closing at fixed.

Metadata Update from @mohanboddu:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.