Added cosign secret and sample HelmRelease implementation
Package Merge Request
Package Changes
- Added template to generate a secret for each item in .Values.helmRepositories that has a
cosignPublicKey
key - Added a "verify" block in the "packages" HelmRelease that will be included if the given package selects
cosignVerify: true
and the HelmRepo is of typeoci
- Updated
_helpers.tpl
with a function to lookup the HelmRepo type based on the provided name (getRepoType
) - Updated
values.yaml
with the new HelmRepo specification (addition ofcosignPublicKey
key) and updated the .packages.sample.helmRepo with acosignVerify
key - Updated
values.schema.json
with the corresponding keys, types, and default values
Package MR
N/A
For Issue
Closes #1780 (closed)
Closes #1780 (closed)
Upgrade Notices
This Upgrade includes Helm OCI Verify in the Flux charts. Now that BigBang signs their OCI Helm Charts, we have added the capabilty for Flux to verify the signature.
Edited by Jared Ladner