release: enable automatic signing in gerrit-release.sh

Update `gerrit-release.sh` to automatically configure and use GPG
credentials for signing operations. When the `$GPG_KEY` private key file
is available, it is imported and paired with the configured
`$GPG_PASSPHRASE_FILE`. The passphrase is provided non-interactively
through the `gpg-loopback` wrapper.

This removes the need for manual input during the release process and
continues the effort toward a fully automated Gerrit release pipeline.

Change-Id: I014f29abc99714653038720f8fbf3dbe2ae7d5be
1 file changed
tree: 86e505b53bc4eb633e770542726e6ce81f7dea2c
  1. jenkins/
  2. jenkins-docker/
  3. jenkins-internal/
  4. vars/
  5. .gitignore
  6. Jenkinsfile
  7. README.md
  8. yamllint-config.yaml
README.md

Gerrit CI scripts

Providing jobs

This project uses Jenkins Jobs Builder [1] to generate jobs from yaml descriptor files.

To add new jobs reuse existing templates, defaults etc. as much as possible. E.g. adding a job to build an additional branch of a project may be as easy as adding the name of the branch to an existing project.

To ensure well readable yaml-files, use yamllint [2] to lint the yaml-files. Yamllint can be downloaded using Python Pip:

pip3 install --require-hashes yamllint

To run the linter, execute this command from the project's root directory:

yamllint -c yamllint-config.yaml jenkins/**/*.yaml

Yamllint will not fix detected issues itself.

[1] https://docs.openstack.org/infra/jenkins-job-builder/index.html [2] https://pypi.org/project/yamllint/