vault-helper icon indicating copy to clipboard operation
vault-helper copied to clipboard

No pgp signature for vault helper version 0.9.14

Open mumbley opened this issue 6 years ago • 2 comments

Hi,

I have just tired to pull your 0.9.14 version of vault-helper but there is no pgp signature file associated with the file vault-helper_0.9.14_linux_amd64? Was this an oversight or is this a change in the release policy?

mumbley avatar Mar 20 '19 11:03 mumbley

This was intentional, we upgraded to the upstream goreleaser tool, which is only signing the sha256sum file instead of each file. We had forked for a goreleaser with GPG support, but an alternative implementation was merged upstream.

So basically you need to download the 3 files and then you can verify any file in the sha256sum like that:

https://github.com/jetstack/tarmak/blob/release-0.5/terraform/amazon/modules/vault/templates/vault_user_data.yaml#L290

simonswine avatar Mar 20 '19 11:03 simonswine

Thanks for the quick response :)

mumbley avatar Mar 20 '19 12:03 mumbley