Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Add chart verify howto to readme #2600

Open
mkilchhofer opened this issue Mar 24, 2024 · 0 comments
Open

Add chart verify howto to readme #2600

mkilchhofer opened this issue Mar 24, 2024 · 0 comments
Assignees
Labels
documentation Improvements or additions to documentation enhancement New feature or request security

Comments

@mkilchhofer
Copy link
Member

Is your feature request related to a problem?

No response

Related helm chart

other

Describe the solution you'd like

In PR #2040 I introduced chart signing.

I'd like to place a short howto inside the READMEs of each chart:

$ # Download and convert our public key
$ wget https://argoproj.github.io/argo-helm/pgp_keys.asc
$ cat pgp_keys.asc |gpg --dearmor > pubring.asc

$ # Pull the helm chart and verify against our public key
$ helm pull --verify oci://ghcr.io/argoproj/argo-helm/argo-cd --version 6.7.3 --keyring pubring.asc
Pulled: ghcr.io/argoproj/argo-helm/argo-cd:6.7.3
Digest: sha256:307eeb9f86fa925c9457ed7803dfd1b170c6545273ab9c001b9fb843efff14ef
Pulled: ghcr.io/argoproj/argo-helm/argo-cd:6.7.3
Digest: sha256:307eeb9f86fa925c9457ed7803dfd1b170c6545273ab9c001b9fb843efff14ef
Signed by: Argo Helm maintainers <cncf-argo-security@lists.cncf.io>
Using Key With Fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
Chart Hash Verified: sha256:f535106a891145a3907301feedc8e0054c3096733d93df273d70582614a115b0

Describe alternatives you've considered

No response

Additional context

No response

@mkilchhofer mkilchhofer added the enhancement New feature or request label Mar 24, 2024
@mkilchhofer mkilchhofer self-assigned this Mar 24, 2024
@mkilchhofer mkilchhofer added documentation Improvements or additions to documentation security labels Mar 24, 2024
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
documentation Improvements or additions to documentation enhancement New feature or request security
Projects
None yet
Development

No branches or pull requests

1 participant