Added cosign secret and sample HelmRelease implementation
Package Merge Request
Package Changes
- Added template to generate a secret for each item in .Values.helmRepositories that has a
cosignPublicKeykey - Added a "verify" block in the "packages" HelmRelease that will be included if the given package selects
cosignVerify: trueand the HelmRepo is of typeoci - Updated
_helpers.tplwith a function to lookup the HelmRepo type based on the provided name (getRepoType) - Updated
values.yamlwith the new HelmRepo specification (addition ofcosignPublicKeykey) and updated the .packages.sample.helmRepo with acosignVerifykey - Updated
values.schema.jsonwith the corresponding keys, types, and default values
Package MR
N/A
For Issue
Closes #1780 (closed)
Closes #1780 (closed)
Upgrade Notices
This Upgrade includes Helm OCI Verify in the Flux charts. Now that BigBang signs their OCI Helm Charts, we have added the capabilty for Flux to verify the signature.
Edited by Jared Ladner