mirror of
https://github.com/external-secrets/external-secrets.git
synced 2024-12-14 11:57:59 +00:00
fix: do not import gpg key from forked repo (#4126)
* fix: do not import gpg key from forked repo The key does not exist there and is not needed. The import-gpg and run-chart-releaser step should only run on main. Otherwise it fails due to missing GPG key and invalid permissions on github token.
This commit is contained in:
parent
7b7dad464d
commit
1d85a90530
2 changed files with 4 additions and 6 deletions
9
.github/workflows/helm.yml
vendored
9
.github/workflows/helm.yml
vendored
|
@ -74,6 +74,9 @@ jobs:
|
||||||
id-token: write # gives the action the ability to mint the OIDC token necessary to request a Sigstore signing certificate
|
id-token: write # gives the action the ability to mint the OIDC token necessary to request a Sigstore signing certificate
|
||||||
attestations: write # this permission is necessary to persist the attestation
|
attestations: write # this permission is necessary to persist the attestation
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
if: |
|
||||||
|
github.ref == 'refs/heads/main' ||
|
||||||
|
startsWith(github.ref, 'refs/heads/release-')
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
||||||
|
@ -90,17 +93,13 @@ jobs:
|
||||||
version: v3.4.2
|
version: v3.4.2
|
||||||
|
|
||||||
- name: Generate chart
|
- name: Generate chart
|
||||||
run: |
|
run: make helm.generate
|
||||||
make helm.generate
|
|
||||||
- name: Import GPG key
|
- name: Import GPG key
|
||||||
run: |
|
run: |
|
||||||
echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --dearmor --output keyring.gpg
|
echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --dearmor --output keyring.gpg
|
||||||
echo -n "${{ secrets.GPG_PASSPHRASE }}" > passphrase-file.txt
|
echo -n "${{ secrets.GPG_PASSPHRASE }}" > passphrase-file.txt
|
||||||
- name: Run chart-releaser
|
- name: Run chart-releaser
|
||||||
uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0
|
uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0
|
||||||
if: |
|
|
||||||
github.ref == 'refs/heads/main' ||
|
|
||||||
startsWith(github.ref, 'refs/heads/release-')
|
|
||||||
env:
|
env:
|
||||||
CR_KEY: external-secrets <external-secrets@external-secrets.io>
|
CR_KEY: external-secrets <external-secrets@external-secrets.io>
|
||||||
CR_KEYRING: keyring.gpg
|
CR_KEYRING: keyring.gpg
|
||||||
|
|
|
@ -13,7 +13,6 @@ icon: https://raw.githubusercontent.com/external-secrets/external-secrets/main/a
|
||||||
maintainers:
|
maintainers:
|
||||||
- name: mcavoyk
|
- name: mcavoyk
|
||||||
email: kellinmcavoy@gmail.com
|
email: kellinmcavoy@gmail.com
|
||||||
|
|
||||||
dependencies:
|
dependencies:
|
||||||
- name: bitwarden-sdk-server
|
- name: bitwarden-sdk-server
|
||||||
version: v0.3.1
|
version: v0.3.1
|
||||||
|
|
Loading…
Reference in a new issue