[CASSANDRA-14963] Release artifacts should be able to be built without being release manager

• Type: Bug
• Status: Open
• Priority: Normal
• Resolution: Unresolved
• Labels: packaging
• Severity: Normal
• Assignee: Unassigned
• Reporter: Michael Shuler
• Created: 07/Jan/19 21:27
• Updated: 09/Feb/20 16:01

Description

Currently, the release artifact build process does full maven upload of gpg-signed artifacts and package builds with repo signing. It would be helpful to be able to build and tag as a committer, then have the gpg signing as a separate event/process. The builds could be local and staged somewhere, then a release manager could verify and gpg sign the artifacts.

Issue Links

• relates to: CASSANDRA-14970 New releases must supply SHA-256 and/or SHA-512 checksums