Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update index.md #1637

Open
wants to merge 4 commits into
base: main
Choose a base branch
from
Open

Update index.md #1637

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
2a239b1
Update index.md
abohmeed Aug 26, 2023
3078d57
Cosign verification uses the public key not the private one
abohmeed Aug 26, 2023
fc38c19
Update index.md
abohmeed Aug 26, 2023
26fa89d
Cosign verification should be done using the
abohmeed Aug 26, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions content/en/blog/2022-11-11-prove-the-authenticity-of-helm-charts/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -247,13 +247,13 @@ This command will generate two files, a `cosign.pub` which is a publickey and `c
Now, let's sign the image with the private key:

```shell
cosign sign --key cosign.key ghcr.io/$USER/nginx@21f92cbd63ab495d8fc44d54dabc4815c88d37697b3f8b757ca8e51ef178a2e7
cosign sign --key cosign.key ghcr.io/$USER/nginx@sha256:21f92cbd63ab495d8fc44d54dabc4815c88d37697b3f8b757ca8e51ef178a2e7
```

Cool! Now we have signed the image with the private key. Let's check the signature:

```shell
cosign verify --key cosign.key ghcr.io/$USER/nginx@21f92cbd63ab495d8fc44d54dabc4815c88d37697b3f8b757ca8e51ef178a2e7
cosign verify --key cosign.key ghcr.io/$USER/nginx@sha256:21f92cbd63ab495d8fc44d54dabc4815c88d37697b3f8b757ca8e51ef178a2e7
```

Yay! It's verified. But in order to make the public key accessible by Flux, we need to create a Kubernetes secret to store the public key:
Expand Down