ImageUpdateAutomation.spec.git.commit.signingKey.secretRef

SecretRef references a Secret containing the signing key. For type 'gpg', the Secret must contain a 'git.asc' (ASCII-armored OpenPGP keypair) and may contain a 'passphrase'. For type 'ssh', the Secret must contain an 'identity' (an SSH private key in any format golang.org/x/crypto/ssh.ParsePrivateKey accepts; typically the OpenSSH format produced by 'ssh-keygen') and may contain a 'password' (the key's passphrase). The SSH conventions match the GitRepository SSH transport-auth Secret format, allowing a single Secret to serve both transport and signing when the ImageUpdateAutomation lives in the same namespace as the GitRepository. The Secret itself must live in the same namespace as the ImageUpdateAutomation. Supported SSH key algorithms: ed25519, ecdsa-sha2-nistp256/384/521, and rsa (>= 2048-bit).