Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Notarize all nightlies and release jobs #3559

Merged
merged 3 commits into from
Oct 10, 2022
Merged

Notarize all nightlies and release jobs #3559

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
7e70da5
notarize all nightlies and releases
upodroid Oct 6, 2022
a02b929
set ORG_NAME as well
upodroid Oct 6, 2022
788189f
fix diffs
upodroid Oct 6, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 36 additions & 16 deletions prow/jobs/generated/knative-sandbox/kn-plugin-admin-main.gen.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,9 +67,13 @@ periodics:
- ./hack/release.sh
- --publish
- --tag-release
- --apple-codesign-key
- /etc/notary/cert.p12
- --apple-notary-api-key
- /etc/notary/key.json
- --apple-codesign-password-file
- /etc/notary/password
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /etc/nightly-account/service-account.json
- name: SIGN_IMAGES
value: "true"
image: gcr.io/knative-tests/test-infra/prow-tests:v20221005-aef947d7
Expand All @@ -78,19 +82,24 @@ periodics:
securityContext:
privileged: true
volumeMounts:
- mountPath: /etc/nightly-account
name: nightly-account
- mountPath: /etc/notary
name: apple-notary-creds
readOnly: true
nodeSelector:
kubernetes.io/arch: amd64
type: testing
serviceAccountName: nightly
volumes:
- name: nightly-account
- name: apple-notary-creds
secret:
items:
- key: nightly.json
path: service-account.json
secretName: prow-google-credentials
- key: notary-api-key
path: key.json
- key: signing-certificate
path: cert.p12
- key: signing-certificate-password
path: password
secretName: apple-notary-creds
- annotations:
testgrid-dashboards: kn-plugin-admin
testgrid-tab-name: release
Expand All @@ -115,11 +124,17 @@ periodics:
- gcr.io/knative-releases
- --github-token
- /etc/hub-token/token
- --apple-codesign-key
- /etc/notary/cert.p12
- --apple-notary-api-key
- /etc/notary/key.json
- --apple-codesign-password-file
- /etc/notary/password
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /etc/release-account/service-account.json
- name: E2E_CLUSTER_REGION
value: us-central1
- name: SIGN_IMAGES
value: "true"
- name: ORG_NAME
value: knative-sandbox
image: gcr.io/knative-tests/test-infra/prow-tests:v20221005-aef947d7
Expand All @@ -131,25 +146,30 @@ periodics:
- mountPath: /etc/hub-token
name: hub-token
readOnly: true
- mountPath: /etc/release-account
name: release-account
- mountPath: /etc/notary
name: apple-notary-creds
readOnly: true
nodeSelector:
kubernetes.io/arch: amd64
type: testing
serviceAccountName: release
volumes:
- name: hub-token
secret:
items:
- key: hub_token
path: token
secretName: github-credentials
- name: release-account
- name: apple-notary-creds
secret:
items:
- key: release.json
path: service-account.json
secretName: prow-google-credentials
- key: notary-api-key
path: key.json
- key: signing-certificate
path: cert.p12
- key: signing-certificate-password
path: password
secretName: apple-notary-creds
presubmits:
knative-sandbox/kn-plugin-admin:
- always_run: true
Expand Down
52 changes: 36 additions & 16 deletions prow/jobs/generated/knative-sandbox/kn-plugin-event-main.gen.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,9 +67,13 @@ periodics:
- ./hack/release.sh
- --publish
- --tag-release
- --apple-codesign-key
- /etc/notary/cert.p12
- --apple-notary-api-key
- /etc/notary/key.json
- --apple-codesign-password-file
- /etc/notary/password
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /etc/nightly-account/service-account.json
- name: SIGN_IMAGES
value: "true"
image: gcr.io/knative-tests/test-infra/prow-tests:v20221005-aef947d7
Expand All @@ -78,19 +82,24 @@ periodics:
securityContext:
privileged: true
volumeMounts:
- mountPath: /etc/nightly-account
name: nightly-account
- mountPath: /etc/notary
name: apple-notary-creds
readOnly: true
nodeSelector:
kubernetes.io/arch: amd64
type: testing
serviceAccountName: nightly
volumes:
- name: nightly-account
- name: apple-notary-creds
secret:
items:
- key: nightly.json
path: service-account.json
secretName: prow-google-credentials
- key: notary-api-key
path: key.json
- key: signing-certificate
path: cert.p12
- key: signing-certificate-password
path: password
secretName: apple-notary-creds
- annotations:
testgrid-dashboards: kn-plugin-event
testgrid-tab-name: release
Expand All @@ -115,11 +124,17 @@ periodics:
- gcr.io/knative-releases
- --github-token
- /etc/hub-token/token
- --apple-codesign-key
- /etc/notary/cert.p12
- --apple-notary-api-key
- /etc/notary/key.json
- --apple-codesign-password-file
- /etc/notary/password
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /etc/release-account/service-account.json
- name: E2E_CLUSTER_REGION
value: us-central1
- name: SIGN_IMAGES
value: "true"
- name: ORG_NAME
value: knative-sandbox
image: gcr.io/knative-tests/test-infra/prow-tests:v20221005-aef947d7
Expand All @@ -131,25 +146,30 @@ periodics:
- mountPath: /etc/hub-token
name: hub-token
readOnly: true
- mountPath: /etc/release-account
name: release-account
- mountPath: /etc/notary
name: apple-notary-creds
readOnly: true
nodeSelector:
kubernetes.io/arch: amd64
type: testing
serviceAccountName: release
volumes:
- name: hub-token
secret:
items:
- key: hub_token
path: token
secretName: github-credentials
- name: release-account
- name: apple-notary-creds
secret:
items:
- key: release.json
path: service-account.json
secretName: prow-google-credentials
- key: notary-api-key
path: key.json
- key: signing-certificate
path: cert.p12
- key: signing-certificate-password
path: password
secretName: apple-notary-creds
presubmits:
knative-sandbox/kn-plugin-event:
- always_run: true
Expand Down
52 changes: 36 additions & 16 deletions prow/jobs/generated/knative-sandbox/kn-plugin-operator-main.gen.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,9 +67,13 @@ periodics:
- ./hack/release.sh
- --publish
- --tag-release
- --apple-codesign-key
- /etc/notary/cert.p12
- --apple-notary-api-key
- /etc/notary/key.json
- --apple-codesign-password-file
- /etc/notary/password
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /etc/nightly-account/service-account.json
- name: SIGN_IMAGES
value: "true"
image: gcr.io/knative-tests/test-infra/prow-tests:v20221005-aef947d7
Expand All @@ -78,19 +82,24 @@ periodics:
securityContext:
privileged: true
volumeMounts:
- mountPath: /etc/nightly-account
name: nightly-account
- mountPath: /etc/notary
name: apple-notary-creds
readOnly: true
nodeSelector:
kubernetes.io/arch: amd64
type: testing
serviceAccountName: nightly
volumes:
- name: nightly-account
- name: apple-notary-creds
secret:
items:
- key: nightly.json
path: service-account.json
secretName: prow-google-credentials
- key: notary-api-key
path: key.json
- key: signing-certificate
path: cert.p12
- key: signing-certificate-password
path: password
secretName: apple-notary-creds
- annotations:
testgrid-dashboards: kn-plugin-operator
testgrid-tab-name: release
Expand All @@ -115,11 +124,17 @@ periodics:
- gcr.io/knative-releases
- --github-token
- /etc/hub-token/token
- --apple-codesign-key
- /etc/notary/cert.p12
- --apple-notary-api-key
- /etc/notary/key.json
- --apple-codesign-password-file
- /etc/notary/password
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /etc/release-account/service-account.json
- name: E2E_CLUSTER_REGION
value: us-central1
- name: SIGN_IMAGES
value: "true"
- name: ORG_NAME
value: knative-sandbox
image: gcr.io/knative-tests/test-infra/prow-tests:v20221005-aef947d7
Expand All @@ -131,25 +146,30 @@ periodics:
- mountPath: /etc/hub-token
name: hub-token
readOnly: true
- mountPath: /etc/release-account
name: release-account
- mountPath: /etc/notary
name: apple-notary-creds
readOnly: true
nodeSelector:
kubernetes.io/arch: amd64
type: testing
serviceAccountName: release
volumes:
- name: hub-token
secret:
items:
- key: hub_token
path: token
secretName: github-credentials
- name: release-account
- name: apple-notary-creds
secret:
items:
- key: release.json
path: service-account.json
secretName: prow-google-credentials
- key: notary-api-key
path: key.json
- key: signing-certificate
path: cert.p12
- key: signing-certificate-password
path: password
secretName: apple-notary-creds
presubmits:
knative-sandbox/kn-plugin-operator:
- always_run: true
Expand Down
27 changes: 19 additions & 8 deletions prow/jobs/generated/knative-sandbox/kn-plugin-quickstart-main.gen.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -124,11 +124,17 @@ periodics:
- gcr.io/knative-releases
- --github-token
- /etc/hub-token/token
- --apple-codesign-key
- /etc/notary/cert.p12
- --apple-notary-api-key
- /etc/notary/key.json
- --apple-codesign-password-file
- /etc/notary/password
env:
- name: GOOGLE_APPLICATION_CREDENTIALS
value: /etc/release-account/service-account.json
- name: E2E_CLUSTER_REGION
value: us-central1
- name: SIGN_IMAGES
value: "true"
- name: ORG_NAME
value: knative-sandbox
image: gcr.io/knative-tests/test-infra/prow-tests:v20221005-aef947d7
Expand All @@ -140,25 +146,30 @@ periodics:
- mountPath: /etc/hub-token
name: hub-token
readOnly: true
- mountPath: /etc/release-account
name: release-account
- mountPath: /etc/notary
name: apple-notary-creds
readOnly: true
nodeSelector:
kubernetes.io/arch: amd64
type: testing
serviceAccountName: release
volumes:
- name: hub-token
secret:
items:
- key: hub_token
path: token
secretName: github-credentials
- name: release-account
- name: apple-notary-creds
secret:
items:
- key: release.json
path: service-account.json
secretName: prow-google-credentials
- key: notary-api-key
path: key.json
- key: signing-certificate
path: cert.p12
- key: signing-certificate-password
path: password
secretName: apple-notary-creds
presubmits:
knative-sandbox/kn-plugin-quickstart:
- always_run: true
Expand Down
Loading