Skip to content

git: add SSH commit signing support to the git client factory#772

Open
Prucek wants to merge 1 commit into
kubernetes-sigs:mainfrom
Prucek:cherrypicker-signed-commits
Open

git: add SSH commit signing support to the git client factory#772
Prucek wants to merge 1 commit into
kubernetes-sigs:mainfrom
Prucek:cherrypicker-signed-commits

Conversation

@Prucek

@Prucek Prucek commented Jun 24, 2026

Copy link
Copy Markdown
Member

Summary

  • Add --git-signing-key-path flag to GitHubOptions for SSH-based commit signing
  • When configured, the git client factory automatically sets gpg.format=ssh, user.signingkey, and commit.gpgsign=true on every cloned repo
  • Any component using GitHubOptions (cherrypicker, tide, etc.) gets signing support automatically

Generated with the help of AI (Claude Code)

@netlify

netlify Bot commented Jun 24, 2026

Copy link
Copy Markdown

Deploy Preview for k8s-prow ready!

Name Link
🔨 Latest commit 6ac6774
🔍 Latest deploy log https://app.netlify.com/projects/k8s-prow/deploys/6a3e331c1deb350008a18f6f
😎 Deploy Preview https://deploy-preview-772--k8s-prow.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@kubernetes-prow kubernetes-prow Bot requested review from matthyx and smg247 June 24, 2026 14:35
@kubernetes-prow kubernetes-prow Bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Jun 24, 2026
@droslean

Copy link
Copy Markdown
Contributor

/hold

I don't think this is the right direction. This feature needs to be embedded into the git client, since the component also uses and initializes. The key path could leave in the github options too.

@kubernetes-prow kubernetes-prow Bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Jun 24, 2026
@kubernetes-prow

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: Prucek
Once this PR has been reviewed and has the lgtm label, please assign droslean for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@Prucek Prucek force-pushed the cherrypicker-signed-commits branch from bdef64b to 298044b Compare June 26, 2026 07:36
@Prucek Prucek changed the title cherrypicker: add SSH commit signing support git: add SSH commit signing support to the git client factory Jun 26, 2026
Add --git-signing-key-path flag to GitHubOptions. When set, the git
client factory configures gpg.format=ssh, user.signingkey, and
commit.gpgsign=true on every cloned repo so that commits produced by
any component are signed.
@Prucek Prucek force-pushed the cherrypicker-signed-commits branch from 298044b to 6ac6774 Compare June 26, 2026 08:06
@jmguzik

jmguzik commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

After changes and discussion
/lgtm
/unhold
/cc @droslean

@kubernetes-prow kubernetes-prow Bot requested a review from droslean June 26, 2026 12:44
@kubernetes-prow kubernetes-prow Bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Jun 26, 2026
@kubernetes-prow kubernetes-prow Bot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Jun 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants