Uploaded image for project: 'OpenShift GitOps'
  1. OpenShift GitOps
  2. GITOPS-2418

OpenShift Gitops can't sync to GPG signed tags

XMLWordPrintable

    • False
    • None
    • False
    • Hide
      Before this update, when enforcing GPG signature verification against a `targetRevision` integer pointing to a signed Git tag, users got a `Target revision in Git is not signed` error. This update fixes the issue and lets users enforce GPG signature verification against signed Git tags.
      Show
      Before this update, when enforcing GPG signature verification against a `targetRevision` integer pointing to a signed Git tag, users got a `Target revision in Git is not signed` error. This update fixes the issue and lets users enforce GPG signature verification against signed Git tags.

      Description of problem:

      Openshift Gitops cant sync to signed GPG tags. This issue was previously faced by the client in OpenShift Gitops 1.5 version.
      But now as they have upgraded the  Openshift Gitops operator version to 1.6 the issue still exists.

      Prerequisites (if any, like setup, operators/versions):

      OCP: 4.10.26
      openshift-gitops-operator.v1.6.2

      Steps to Reproduce:

      1. Generate a GPG key and verify with GitHub. 
      2. Add the GPG key to ArgoCD and your project in ArgoCD. 
      3. Create a repo and sign the commit. Deploy and you'll see the deployment is fine. 
      4. Now create a tag (signed or unsigned) and change targetRevision to the tag. The deployment fails.

      Ongoing Upstream Bug: https://github.com/argoproj/argo-cd/issues/7377

      Expected results:

      It is expected ArgoCD to be satisfied with the signed tag.

      Additional info:

      slack thread: https://coreos.slack.com/archives/CMP95ST2N/p1668421656426119

      https://docs.github.com/en/authentication/managing-commit-signature-verification/generating-a-new-gpg-key
      https://docs.github.com/en/authentication/managing-commit-signature-verification/adding-a-new-gpg-key-to-your-github-account
      https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work

       

       

              jfischer@redhat.com Jann Fischer
              rhn-support-dtambat Darshan Tambat
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: