You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@asyncband.apache.org by "orthur2 (via GitHub)" <gi...@apache.org> on 2026/09/22 15:41:21 UTC
[I] Automated source release upload to ATR fails: project signing key UID does not match ATR naming [asyncband]
orthur2 opened a new issue, #329:
URL: https://github.com/apache/asyncband/issues/329
## Summary
The automated source release for 0.7.3 RC1 built and signed the archive, but ATR rejected the upload because it does not recognize our automated release signing key. Tracking issue: #327.
## Details
- Run: https://github.com/apache/asyncband/actions/runs/35744336802. The `Upload to ATR compose` step failed while registering the upload key:
```
{"error":"Project asyncband is not in a committee that can make automated releases"}
```
- ATR only accepts a committee signing key whose primary user ID contains "Automated Release Signing" or "Services RM". It matches the label case-sensitively ([check](https://github.com/apache/tooling-trusted-releases/blob/505c0577232ed635d8c5bdcedb4124d9a1ca1809/atr/util.py#L1047-L1052)).
- Our key `023A 42E7 299A 010F EE7A E021 393A FB9D 52BB 37B8` in [KEYS](https://downloads.apache.org/incubator/asyncband/KEYS) has the primary user ID `Apache Asyncband automated release signing key <pr...@asyncband.apache.org>`. Its lowercase label does not match.
## Requested fix
Add a primary user ID such as `Apache Asyncband Automated Release Signing <pr...@asyncband.apache.org>` to the key, and update its entry in `https://dist.apache.org/repos/dist/release/incubator/asyncband/KEYS`. The fingerprint stays the same, so the GitHub secrets do not need to change. Alternatively, replace the key and update KEYS and both secrets.
It would also help if ATR matched these labels case-insensitively, or said which requirement was not met.
## Next step
After the key is fixed, we will re-run the failed job in the same workflow run. The release contents are unchanged, so no new RC is needed.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@asyncband.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@asyncband.apache.org
For additional commands, e-mail: commits-help@asyncband.apache.org
Re: [I] Automated source release upload to ATR fails: project signing key UID does not match ATR naming [asyncband]
Posted by "orthur2 (via GitHub)" <gi...@apache.org>.
orthur2 commented on issue #329:
URL: https://github.com/apache/asyncband/issues/329#issuecomment-5780284416
Confirmed. After the ATR fix was deployed, re-running the failed job signed and uploaded the source release to ATR (asyncband 0.7.3) without any change to the signing key.
The fix speed was incredible!
Thanks!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@asyncband.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@asyncband.apache.org
For additional commands, e-mail: commits-help@asyncband.apache.org
Re: [I] Automated source release upload to ATR fails: project signing key UID does not match ATR naming [asyncband]
Posted by "orthur2 (via GitHub)" <gi...@apache.org>.
orthur2 closed issue #329: Automated source release upload to ATR fails: project signing key UID does not match ATR naming
URL: https://github.com/apache/asyncband/issues/329
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@asyncband.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@asyncband.apache.org
For additional commands, e-mail: commits-help@asyncband.apache.org
Re: [I] Automated source release upload to ATR fails: project signing key UID does not match ATR naming [asyncband]
Posted by "tisonkun (via GitHub)" <gi...@apache.org>.
tisonkun commented on issue #329:
URL: https://github.com/apache/asyncband/issues/329#issuecomment-5779967088
This should be resolved by https://github.com/apache/tooling-trusted-releases/commit/48b888953e25cc06b82159b490609d598d1310e7.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@asyncband.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@asyncband.apache.org
For additional commands, e-mail: commits-help@asyncband.apache.org