Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci: Setup signing packages #25

Merged
merged 4 commits into from
Jan 28, 2025
Merged

ci: Setup signing packages #25

merged 4 commits into from
Jan 28, 2025

Conversation

cveticm
Copy link
Collaborator

@cveticm cveticm commented Jan 27, 2025

Proposed changes

Adds signing to all packages and includes sig public key in release.
SIgning for binaries will be done as a part of CLOUDP-297212.

Test release: https://github.com/mongodb/atlas-cli-plugin-kubernetes/releases/tag/v0.0.2
Verifying package signature for macos package:
image

Noting that the current key used for signatures is the atlas-cli key. This is to avoid blocking this work. A request will be made to create a new key exclusively for signing the K8s plugin and, once this key is available, necessary changes will be made to the signing process to use this new key.

Jira ticket: CLOUDP-294915

Checklist

  • I have signed the MongoDB CLA
  • I have added tests that prove my fix is effective or that my feature works
  • I have added any necessary documentation in the document requirements section listed in CONTRIBUTING.md (if appropriate)
  • I have addressed the @mongodb/docs-cloud-team comments (if appropriate)
  • I have run make fmt and formatted my code

Further comments

@cveticm cveticm marked this pull request as ready for review January 27, 2025 18:06
@cveticm cveticm marked this pull request as draft January 27, 2025 18:08
@cveticm cveticm marked this pull request as ready for review January 28, 2025 11:36
RELEASING.md Outdated
Comment on lines 19 to 20
2. If everything goes smoothly, the release will be published in the [releases page](https://github.com/mongodb/atlas-cli-plugin-kubernetes/releases).
3. The [evergreen](build/ci/release.yml) copybara task will automatically open a PR on docs repositories with any document changes for the docs team to review and merge.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

renumber (3. and 4.) needed

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch, done! 👍

Copy link
Collaborator

@andreaangiolillo andreaangiolillo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM after you verified that the binaries in the GH release page (see https://www.mongodb.com/docs/atlas/cli/current/verify-packages/#verify-linux-packages)

@cveticm cveticm merged commit e7edf97 into main Jan 28, 2025
12 of 13 checks passed
@cveticm cveticm deleted the CLOUDP-294915_setup_signing branch January 28, 2025 12:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants