0. Overivew - Packet manager 1. Helm Provenance and Integrity - https://github.com/technosophos/k8s-helm/blob/master/docs/provenance.md - Helm has provenance tools which help chart users verify the integrity and origin of a package. Using industry-standard tools based on PKI, GnuPG, and well-respected package managers, Helm can generate and verify signature files. a) Overview - I ntegrity is established by comparing a chart to a provenance record. Provenance records are stored in provenance files , which are stored alongside a packaged chart. For example, if a chart is named myapp-1.2.3.tgz , its provenance file will be myapp-1.2.3.tgz.prov . - Provenance files are generated at packaging time ( helm package --sign ... ), and can be checked by multiple commands, notable helm install --verify . b) The workflow This section describes a potential workflow for using provenance data effectively. Prerequisites: A valid PGP keyp...
Komentarze
Prześlij komentarz