Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

headlamp helm chart should be signed #1989

Closed
illume opened this issue May 22, 2024 · 1 comment · Fixed by #2146
Closed

headlamp helm chart should be signed #1989

illume opened this issue May 22, 2024 · 1 comment · Fixed by #2146
Assignees
Labels
helm Related to helm and app-catalog security
Milestone

Comments

@illume
Copy link
Collaborator

illume commented May 22, 2024

Artifact hub is complaining that the helm chart is not signed.

image

Note: there's an issue for all of our releases being signed here: #2092


From the helm documentation

To sign a chart, use the '--sign' flag. In most cases, you should also provide '--keyring path/to/secret/keys' and '--key keyname'.

$ helm package --sign ./mychart --key mykey --keyring ~/.gnupg/secring.gpg

If '--keyring' is not specified, Helm usually defaults to the public keyring unless your environment is otherwise configured.

@illume illume added security helm Related to helm and app-catalog labels May 22, 2024
@knrt10 knrt10 self-assigned this Jun 24, 2024
@knrt10
Copy link
Contributor

knrt10 commented Jun 24, 2024

Working on this

knrt10 added a commit that referenced this issue Jul 8, 2024
This add steps to releasing of Helm charts where is uses the gpg keys to
sign and release the charts.

Fixes: #1989
Signed-off-by: Kautilya Tripathi <[email protected]>
knrt10 added a commit that referenced this issue Jul 23, 2024
This add steps to releasing of Helm charts where is uses the gpg keys to
sign and release the charts.

Fixes: #1989
Signed-off-by: Kautilya Tripathi <[email protected]>
@illume illume added this to the v0.25.0 milestone Jul 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
helm Related to helm and app-catalog security
Projects
Development

Successfully merging a pull request may close this issue.

2 participants