ImageUpdateAutomation.spec.git.commit.signingKey
SigningKey provides the option to sign commits with an OpenPGP or SSH signing key, referenced from a Secret. See SigningKey.
| Field / Type | Description |
|---|---|
SecretRef references a Secret containing the signing key. For type 'gpg', the Secret must contain a 'git.asc' (ASCII-armored OpenPGP keypair) and may contain a 'passphrase'. For type 'ssh', the Secret must contain an 'identity' (an SSH private key in any format golang.org/x/crypto/ssh.ParsePrivateKey accepts; typically the OpenSSH format produced by 'ssh-keygen') and may contain a 'password' (the key's passphrase). The SSH conventions match the GitRepository SSH transport-auth Secret format, allowing a single Secret to serve both transport and signing when the ImageUpdateAutomation lives in the same namespace as the GitRepository. The Secret itself must live in the same namespace as the ImageUpdateAutomation. Supported SSH key algorithms: ed25519, ecdsa-sha2-nistp256/384/521, and rsa (>= 2048-bit). | |
type | Type selects the signing-key format expected in the referenced Secret. When empty, the controller defaults to 'gpg'.
|