From 2bdd5390ebecfa6eb8761b5b4262d440e43e7151 Mon Sep 17 00:00:00 2001 From: Adrien Gentil Date: Wed, 23 Sep 2026 10:36:10 +0200 Subject: [PATCH] NO-ISSUE: retry cosign sign in push_and_sign_chart Transient OIDC/registry errors can fail cosign signing even when the preceding helm push succeeded. Wrap the cosign call with retry_command (60s timeout, 10s interval) matching the existing helm push retry. Assisted-by: Claude Code Co-Authored-By: Claude Sonnet 4.6 (1M context) Signed-off-by: Adrien Gentil --- osac-installer/scripts/nightly-charts.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/osac-installer/scripts/nightly-charts.sh b/osac-installer/scripts/nightly-charts.sh index 45f0aca5fc..2fdd9e6a80 100755 --- a/osac-installer/scripts/nightly-charts.sh +++ b/osac-installer/scripts/nightly-charts.sh @@ -542,7 +542,7 @@ push_and_sign_chart() { # errexit without ever running the RETURN trap above (also confirmed # live -- unlike an explicit `return`, errexit on a function's last # command skips RETURN traps entirely), which would leak output_file. - cosign sign --yes "${oci_repo}/${chart_name}@${digest}" || status=$? + retry_command 60 10 cosign sign --yes "${oci_repo}/${chart_name}@${digest}" || status=$? if [[ "${status}" -ne 0 ]]; then echo "::error::cosign sign failed for ${chart_name} (exit ${status})" >&2 rm -f "${output_file}"