fleeto / sign-validator

Validating images with cosign and shell operator

Built with Shell Operator

Build & Deploy

Docker Image

$ ./build.image.sh [repository:tag]
...

Helm install

cfssl is needed.

# Generate certs for 
$ ./gen-certs.sh
...
# Store public keys into the secret.
$ kubectl create secret generic cosign-keys --from-file=cosign.pub
$ helm install cosign-validator .
...

Usage

# 

If a namespace has a label like signed: "required", any pods without signature will be rejected.