@@ -122,17 +122,6 @@ jobs:
122122 # echo "CR_KEYRING=$keyring" >> "$GITHUB_ENV"
123123 # if: steps.tag_exists.outputs.TAG_EXISTS == 'false'
124124
125- # - name: Publish Helm chart
126- # uses: helm/chart-releaser-action@v1.7.0
127- # with:
128- # charts_dir: .
129- # env:
130- # CR_TOKEN: ${{ secrets.GITHUB_TOKEN }}
131- # CR_KEY: traefik-helm-sign-test
132- # CR_SIGN: true
133- # if: steps.tag_exists.outputs.TAG_EXISTS == 'false'
134-
135-
136125
137126
138127
@@ -148,28 +137,46 @@ jobs:
148137
149138 # Helm requires the legacy GPG format
150139 # @link https://helm.sh/docs/topics/provenance/#the-workflow
151- - name : Convert GPG v2 key
140+ - name : Prepare GPG key
152141 run : |
153142 gpg --export > ~/.gnupg/pubring.gpg
154143 gpg --batch --pinentry-mode loopback --yes --passphrase '${{ secrets.GPG_PASSPHRASE }}' --export-secret-key > ~/.gnupg/secring.gpg
144+ echo "${{ secrets.GPG_PRIVATE_KEY }}" | gpg --dearmor > $HOME/secring.gpg
145+ echo "${{ secrets.GPG_PASSPHRASE }}" > $HOME/passphrase.txt
146+ echo "CR_KEYRING=$HOME/secring.gpg" >> "$GITHUB_ENV"
147+ echo "CR_PASSPHRASE_FILE=$HOME/passphrase.txt" >> "$GITHUB_ENV"
155148 # if: steps.tag_exists.outputs.TAG_EXISTS == 'false'
156- - name : Chart | Push and sign
157- uses : appany/helm-oci-chart-releaser@v0.5.0
149+
150+
151+
152+
153+
154+ - name : Publish Helm chart
155+ uses : helm/chart-releaser-action@v1.7.0
158156 with :
159- name : traefik
160- repository : bpsoraggi/helm
161- tag : ${{ steps.chart_version.outputs.CHART_VERSION }}
162- path : ./traefik
163- registry : ghcr.io
164- registry_username : bpsoraggi
165- registry_password : ${{ secrets.GHCR_TOKEN }}
166- sign : true
167- signing_key : ${{ steps.gpg.outputs.name }}
168- signing_passphrase : ${{ secrets.GPG_PASSPHRASE }}
169- update_dependencies : ' true' # Defaults to false
170- # if: steps.tag_exists.outputs.TAG_EXISTS == 'false'
157+ charts_dir : .
158+ env :
159+ CR_TOKEN : ${{ secrets.GITHUB_TOKEN }}
160+ CR_KEY : ${{ steps.gpg.outputs.name }}
161+ CR_SIGN : true
162+ if : steps.tag_exists.outputs.TAG_EXISTS == 'false'
171163
172- # helm pull ghcr.io/appany/my-chart:0.1.0
164+
165+ # - name: Publish Helm chart to the ghcr.io registry
166+ # uses: appany/helm-oci-chart-releaser@v0.5.0
167+ # with:
168+ # name: traefik
169+ # repository: bpsoraggi/helm
170+ # tag: ${{ steps.chart_version.outputs.CHART_VERSION }}
171+ # path: ./traefik
172+ # registry: ghcr.io
173+ # registry_username: bpsoraggi
174+ # registry_password: ${{ secrets.GHCR_TOKEN }}
175+ # sign: true
176+ # signing_key: ${{ steps.gpg.outputs.name }}
177+ # signing_passphrase: ${{ secrets.GPG_PASSPHRASE }}
178+ # update_dependencies: 'true' # Defaults to false
179+ # # if: steps.tag_exists.outputs.TAG_EXISTS == 'false'
173180
174181
175182
0 commit comments