-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ci: Setup signing packages #25
Conversation
RELEASING.md
Outdated
2. If everything goes smoothly, the release will be published in the [releases page](https://github.com/mongodb/atlas-cli-plugin-kubernetes/releases). | ||
3. The [evergreen](build/ci/release.yml) copybara task will automatically open a PR on docs repositories with any document changes for the docs team to review and merge. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
renumber (3. and 4.) needed
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good catch, done! 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM after you verified that the binaries in the GH release page (see https://www.mongodb.com/docs/atlas/cli/current/verify-packages/#verify-linux-packages)
Proposed changes
Adds signing to all packages and includes sig public key in release.
SIgning for binaries will be done as a part of CLOUDP-297212.
Test release: https://github.com/mongodb/atlas-cli-plugin-kubernetes/releases/tag/v0.0.2

Verifying package signature for macos package:
Noting that the current key used for signatures is the atlas-cli key. This is to avoid blocking this work. A request will be made to create a new key exclusively for signing the K8s plugin and, once this key is available, necessary changes will be made to the signing process to use this new key.
Jira ticket: CLOUDP-294915
Checklist
make fmt
and formatted my codeFurther comments