From 3823498e7f44aec15c144c6119eedacffec9680f Mon Sep 17 00:00:00 2001
From: Ken Dreyer <kdreyer@redhat.com>
Date: Feb 16 2022 18:44:05 +0000
Subject: README: document multiple key ID behavior


Explain how to set multiple key IDs, and how Koji operates on that list.

---

diff --git a/README.md b/README.md
index c7a74a2..77b5d96 100644
--- a/README.md
+++ b/README.md
@@ -51,3 +51,13 @@ To confirm that the tag has the correct options set, use the `koji taginfo` comm
 To disable the plugin for the same tag:
 
     koji edit-tag -r tag2distrepo.enabled -r tag2distrepo.keys f33-infra
+
+# Using Multiple Keys
+
+If you want to create a repository that contains builds signed by more than one key, list your desired key IDs ordered by preference.
+
+For example:
+
+    koji edit-tag coreos-pool -x tag2distrepo.keys="45719a39 9867c58f 38ab71f4 5323552a"
+
+For each RPM in the tag, Koji will use the first signed copy that it finds. In other words, Koji will try the first key (`45719a39`), and if Koji does not have the first key's signature for that RPM, then it will try the second key (`9867c58f`), third key (`38ab71f4`), and so on.