Use separate CI key for CI signing. (#113)

transparency-dev · Sep 8, 2023 · 65282a5 · 65282a5
1 parent abcfd9c
commit 65282a5
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/release/cloudbuild.yaml b/release/cloudbuild.yaml
@@ -126,10 +126,10 @@ steps:
       - '{"origin": "${_ORIGIN}", "bucket": "${_LOG_NAME}"}'
 substitutions:
   # Build-related.
-  _REGION: europe-west2
   _TRUSTED_APPLET_BUCKET: trusted-applet-artifacts
   _TAMAGO_VERSION: '1.20.6'
   # Signing-related.
+  _REGION: europe-west2
   _KMS_KEY: trusted-applet
   _KMS_KEYRING: armored-witness
   _KMS_KEY_VERSION: '1'

diff --git a/release/cloudbuild_ci.yaml b/release/cloudbuild_ci.yaml
@@ -126,12 +126,12 @@ steps:
       - '{"origin": "${_ORIGIN}", "bucket": "${_LOG_NAME}"}'
 substitutions:
   # Build-related.
-  _REGION: europe-west2
   _TRUSTED_APPLET_BUCKET: trusted-applet-artifacts-ci
   _TAMAGO_VERSION: '1.20.6'
   _TEST_TAG_NAME: '0.1.2'
   # Signing-related.
-  _KMS_KEY: trusted-applet
+  _REGION: europe-west2
+  _KMS_KEY: trusted-applet-ci
   _KMS_KEYRING: armored-witness
   _KMS_KEY_VERSION: '1'
   # Log-related.