Uploaded image for project: 'OpenShift GitOps'
  1. OpenShift GitOps
  2. GITOPS-2418

OpenShift Gitops can't sync to GPG signed tags

    XMLWordPrintable

Details

    • False
    • None
    • False
    • Hide
      Before this update, when enforcing GPG signature verification against a `targetRevision` integer pointing to a signed Git tag, users got a `Target revision in Git is not signed` error. This update fixes the issue and lets users enforce GPG signature verification against signed Git tags.
      Show
      Before this update, when enforcing GPG signature verification against a `targetRevision` integer pointing to a signed Git tag, users got a `Target revision in Git is not signed` error. This update fixes the issue and lets users enforce GPG signature verification against signed Git tags.

    Description

      Description of problem:

      Openshift Gitops cant sync to signed GPG tags. This issue was previously faced by the client in OpenShift Gitops 1.5 version.
      But now as they have upgraded the  Openshift Gitops operator version to 1.6 the issue still exists.

      Prerequisites (if any, like setup, operators/versions):

      OCP: 4.10.26
      openshift-gitops-operator.v1.6.2

      Steps to Reproduce:

      1. Generate a GPG key and verify with GitHub. 
      2. Add the GPG key to ArgoCD and your project in ArgoCD. 
      3. Create a repo and sign the commit. Deploy and you'll see the deployment is fine. 
      4. Now create a tag (signed or unsigned) and change targetRevision to the tag. The deployment fails.

      Ongoing Upstream Bug: https://github.com/argoproj/argo-cd/issues/7377

      Expected results:

      It is expected ArgoCD to be satisfied with the signed tag.

      Additional info:

      slack thread: https://coreos.slack.com/archives/CMP95ST2N/p1668421656426119

      https://docs.github.com/en/authentication/managing-commit-signature-verification/generating-a-new-gpg-key
      https://docs.github.com/en/authentication/managing-commit-signature-verification/adding-a-new-gpg-key-to-your-github-account
      https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work

       

       

      Attachments

        Activity

          People

            jfischer@redhat.com Jann Fischer
            rhn-support-dtambat Darshan Tambat
            Votes:
            0 Vote for this issue
            Watchers:
            9 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: