Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add chart verify howto to readme #2600

Open
mkilchhofer opened this issue Mar 24, 2024 · 0 comments
Open

Add chart verify howto to readme #2600

mkilchhofer opened this issue Mar 24, 2024 · 0 comments

Comments

@mkilchhofer
Copy link
Member

Is your feature request related to a problem?

No response

Related helm chart

other

Describe the solution you'd like

In PR #2040 I introduced chart signing.

I'd like to place a short howto inside the READMEs of each chart:

$ # Download and convert our public key
$ wget https://argoproj.github.io/argo-helm/pgp_keys.asc
$ cat pgp_keys.asc |gpg --dearmor > pubring.asc

$ # Pull the helm chart and verify against our public key
$ helm pull --verify oci://ghcr.io/argoproj/argo-helm/argo-cd --version 6.7.3 --keyring pubring.asc
Pulled: ghcr.io/argoproj/argo-helm/argo-cd:6.7.3
Digest: sha256:307eeb9f86fa925c9457ed7803dfd1b170c6545273ab9c001b9fb843efff14ef
Pulled: ghcr.io/argoproj/argo-helm/argo-cd:6.7.3
Digest: sha256:307eeb9f86fa925c9457ed7803dfd1b170c6545273ab9c001b9fb843efff14ef
Signed by: Argo Helm maintainers <cncf-argo-security@lists.cncf.io>
Using Key With Fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
Chart Hash Verified: sha256:f535106a891145a3907301feedc8e0054c3096733d93df273d70582614a115b0

Describe alternatives you've considered

No response

Additional context

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant