Merge pull request #36 from opf/feature/helm-signing

Sign helm chart with Operations PGP

.github/workflows/cr.yaml

@@ -0,0 +1,5 @@
+# cr.yaml
+# Use PGP signatures
+sign: true
+# UID of the GPG key to use
+key: "[email protected]"

.github/workflows/release.yml

@@ -23,10 +23,26 @@ jobs:
           git config user.name "$GITHUB_ACTOR"
           git config user.email "[email protected]"
 
+      - name: Prepare GPG key
+        run: |
+          gpg_dir=.cr-gpg
+          mkdir "$gpg_dir"
+          keyring="$gpg_dir/secring.gpg"
+          base64 -d <<< "$GPG_OPERATIONS_BASE64" > "$keyring"
+          passphrase_file="$gpg_dir/passphrase"
+          echo "$GPG_OPERATIONS_PASSPHRASE" > "$passphrase_file"
+          echo "CR_PASSPHRASE_FILE=$passphrase_file" >> "$GITHUB_ENV"
+          echo "CR_KEYRING=$keyring" >> "$GITHUB_ENV"
+        env:
+          GPG_OPERATIONS_BASE64: "${{ secrets.GPG_OPERATIONS_BASE64 }}"
+          GPG_OPERATIONS_PASSPHRASE: "${{ secrets.GPG_OPERATIONS_PASSPHRASE }}"
+
       - name: Install Helm
         uses: azure/setup-helm@v3
 
       - name: Run chart-releaser
         uses: helm/[email protected]
+        with:
+          config: cr.yaml
         env:
           CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

charts/openproject/Chart.yaml

@@ -6,7 +6,7 @@ home: "https://www.openproject.org/"
 icon: "https://www.openproject.org/assets/images/press/openproject-icon-original-color-41055eb6.png"
 type: "application"
 appVersion: "13"
-version: "2.5.1"
+version: "2.6.0"
 maintainers:
   - name: OpenProject
     url: https://github.com/opf/helm-charts