denormalize signing key info in export tables

[google]

denormalize signing key info in export tables

[mikehelmick]

In the current implementation the version is built into the ExportConfig and copied to the ExportBatch.

So, if we change a key version by changing the ExportConfig, all new batches will be signed w/ the new key version.

[gurayAlsac]

The server would need to sign with both old and new key until new key is fully rolled out. And there's also the cosigner case to support.

[mikehelmick]

ok, that's more complicated to represent...

[mikehelmick]

/assign

[github-actions]

This issue is stale because it has been open for 14 days with no
activity. It will automatically close after 7 more days of inactivity.

[mikehelmick]

/close

This is fixed. Export config allows multiple signature infos to be configured.

[google-prow-robot]

@mikehelmick: Closing this issue.

In response to this:

/close

This is fixed. Export config allows multiple signature infos to be configured.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.