Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

charts: Add signing of Helm charts #2146

Merged
merged 1 commit into from
Jul 25, 2024
Merged

charts: Add signing of Helm charts #2146

merged 1 commit into from
Jul 25, 2024

Conversation

knrt10
Copy link
Contributor

@knrt10 knrt10 commented Jul 8, 2024

This add steps to releasing of Helm charts where it uses the gpg keys to sign and release the charts.

Fixes: #1989

@knrt10 knrt10 requested a review from a team July 8, 2024 05:50
@knrt10
Copy link
Contributor Author

knrt10 commented Jul 23, 2024

Tested it here, action and verification tick at ArtifactHub here

@knrt10
Copy link
Contributor Author

knrt10 commented Jul 23, 2024

For everyone's context, it is required to save passphrase in file, otherwise second option is to pass it as stdin which is not a secure solution in CI. I think since we are already adding it a temp folder .cr-gpg which gets cleaned after the CI is stopped, it should not be a problem.

This add steps to releasing of Helm charts where is uses the gpg keys to
sign and release the charts.

Fixes: #1989
Signed-off-by: Kautilya Tripathi <[email protected]>
@illume illume added this to the v0.25.0 milestone Jul 25, 2024
@joaquimrocha joaquimrocha merged commit efb6b9f into main Jul 25, 2024
20 checks passed
@joaquimrocha joaquimrocha deleted the sign-helm branch July 25, 2024 13:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

Successfully merging this pull request may close these issues.

headlamp helm chart should be signed
3 participants