Merge ~cjwatson/launchpad-mojo-specs:signing-bilimbi into launchpad-mojo-specs:master

[Colin Watson]

signing: Allow bilimbi to use internal API

This is needed for signing copy archives.

[Thiago F. Pappacena (pappacena)]

LGTM

review: Approve

diff --git a/mojo-lp-signing/configs/custom-secgroups-production.yaml b/mojo-lp-signing/configs/custom-secgroups-production.yaml
index 51a0178..93a5552 100644
--- a/mojo-lp-signing/configs/custom-secgroups-production.yaml
+++ b/mojo-lp-signing/configs/custom-secgroups-production.yaml
@@ -36,8 +36,10 @@ rules:
         # Allow carob to fetch logs.
         - {"protocol": "tcp", "family": "IPv4", "port": 873, "cidr": "91.189.90.14/32"}
     lp-signing-services:
-        # Allow Soyuz servers (anonster, haetae, ganondorf, chakron) to use the internal API.
+        # Allow Soyuz servers (anonster, haetae, ganondorf, chakron,
+        # bilimbi) to use the internal API.
         - {"protocol": "tcp", "family": "IPv4", "port": 8000, "cidr": "91.189.89.100/32"}
         - {"protocol": "tcp", "family": "IPv4", "port": 8000, "cidr": "91.189.95.83/32"}
         - {"protocol": "tcp", "family": "IPv4", "port": 8000, "cidr": "91.189.95.85/32"}
         - {"protocol": "tcp", "family": "IPv4", "port": 8000, "cidr": "91.189.94.85/32"}
+        - {"protocol": "tcp", "family": "IPv4", "port": 8000, "cidr": "91.189.89.32/32"}