Dev

.gitlab-ci.yml

@@ -121,10 +121,11 @@ build-helm:
     refs:
       - /^release-.*/
   before_script:
+    - echo "$CI_GPG_KEYRING" | base64 -d > ./secring.gpg
     - echo "$CI_REGISTRY_PASSWORD" | docker login --username "$CI_REGISTRY_USER" --password-stdin $CI_REGISTRY_URL
   script:
     - apk add sed helm curl
-    - helm package ./helm/dbrepo --destination ./build
+    - helm package ./helm/dbrepo --sign --key 'Martin Weise' --keyring ./secring.gpg --destination ./build
 
 verify-install-script:
   image: docker.io/docker:24-dind
@@ -590,7 +591,7 @@ release-images:
   script:
     - "make release-images"
 
-release-chart:
+release-helm:
   stage: release
   image: docker:24-dind
   only:
@@ -605,10 +606,11 @@ release-chart:
     - "docker logout ${CI_REGISTRY2_URL}"
     - "echo ${CI_REGISTRY2_PASSWORD} | docker login --username ${CI_REGISTRY2_USER} --password-stdin ${CI_REGISTRY2_URL}"
     - "apk add sed helm curl"
-    - "helm package ./helm/dbrepo --destination ./build"
+    - echo "$CI_GPG_KEYRING" | base64 -d > ./secring.gpg
+    - helm package ./helm/dbrepo --sign --key 'Martin Weise' --keyring ./secring.gpg --destination ./build
     - "helm plugin install https://github.com/sigstore/helm-sigstore"
   script:
-    - "helm push ./build/dbrepo-${CHART_VERSION}.tgz oci://${CI_REGISTRY2_URL}/helm"
+    - "helm sigstore upload ./build/dbrepo-${CHART_VERSION}.tgz oci://${CI_REGISTRY2_URL}/helm"
 
 release-docs:
   stage: release