1
0
Fork 0
mirror of https://github.com/external-secrets/external-secrets.git synced 2024-12-14 11:57:59 +00:00

fix: do not import gpg key from forked repo (#4126)

* fix: do not import gpg key from forked repo

The key does not exist there and is not needed.
The import-gpg and run-chart-releaser step should only run
on main.
Otherwise it fails due to missing GPG key and invalid permissions on
github token.
This commit is contained in:
Moritz Johner 2024-11-19 21:58:25 +01:00 committed by GitHub
parent 7b7dad464d
commit 1d85a90530
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 4 additions and 6 deletions

View file

@ -74,6 +74,9 @@ jobs:
id-token: write # gives the action the ability to mint the OIDC token necessary to request a Sigstore signing certificate id-token: write # gives the action the ability to mint the OIDC token necessary to request a Sigstore signing certificate
attestations: write # this permission is necessary to persist the attestation attestations: write # this permission is necessary to persist the attestation
runs-on: ubuntu-latest runs-on: ubuntu-latest
if: |
github.ref == 'refs/heads/main' ||
startsWith(github.ref, 'refs/heads/release-')
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@ -90,17 +93,13 @@ jobs:
version: v3.4.2 version: v3.4.2
- name: Generate chart - name: Generate chart
run: | run: make helm.generate
make helm.generate
- name: Import GPG key - name: Import GPG key
run: | run: |
echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --dearmor --output keyring.gpg echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --dearmor --output keyring.gpg
echo -n "${{ secrets.GPG_PASSPHRASE }}" > passphrase-file.txt echo -n "${{ secrets.GPG_PASSPHRASE }}" > passphrase-file.txt
- name: Run chart-releaser - name: Run chart-releaser
uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0 uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0
if: |
github.ref == 'refs/heads/main' ||
startsWith(github.ref, 'refs/heads/release-')
env: env:
CR_KEY: external-secrets <external-secrets@external-secrets.io> CR_KEY: external-secrets <external-secrets@external-secrets.io>
CR_KEYRING: keyring.gpg CR_KEYRING: keyring.gpg

View file

@ -13,7 +13,6 @@ icon: https://raw.githubusercontent.com/external-secrets/external-secrets/main/a
maintainers: maintainers:
- name: mcavoyk - name: mcavoyk
email: kellinmcavoy@gmail.com email: kellinmcavoy@gmail.com
dependencies: dependencies:
- name: bitwarden-sdk-server - name: bitwarden-sdk-server
version: v0.3.1 version: v0.3.1