Merge pull request #534 from fluxcd/pgp-pk-nil

Check if GPG private key is nil before decrypting
fluxcd · Jun 7, 2023 · 7c0529b · 7c0529b
2 parents a85f25d + faf265e
commit 7c0529b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/controller/imageupdateautomation_controller.go b/internal/controller/imageupdateautomation_controller.go
@@ -574,7 +574,7 @@ func (r *ImageUpdateAutomationReconciler) getSigningEntity(ctx context.Context,
 	}
 
 	entity := entities[0]
-	if entity.PrivateKey.Encrypted {
+	if entity.PrivateKey != nil && entity.PrivateKey.Encrypted {
 		passphrase, ok := secret.Data[signingPassphraseKey]
 		if !ok {
 			return nil, fmt.Errorf("can not use passphrase protected signing key without '%s' field present in secret %s",