Skip to content

v0.0.11

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Jan 09:49
· 3 commits to develop since this release
v0.0.11
28f77eb

Installation and signature verification

Verify checksums file signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/

The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:

# Download the checksums file, certificate, and signature
curl -LO https://github.com/kumaritanushree/secretgen-controller/releases/download/v0.0.11/checksums.txt
curl -LO https://github.com/kumaritanushree/secretgen-controller/releases/download/v0.0.11/checksums.txt.pem
curl -LO https://github.com/kumaritanushree/secretgen-controller/releases/download/v0.0.11/checksums.txt.sig

### Verify the checksums file
cosign verify-blob checksums.txt --certificate checksums.txt.pem --signature checksums.txt.sig --certificate-identityregexp=https://github.com/kumaritanushree --certificate-oidc-issuer=https://token.actions.githubusercontent.com

Installation of secretgen-controller

secretgen-controller can be installed by using kapp

kapp deploy -a sg -f https://github.com/kumaritanushree/secretgen-controller/releases/v0.0.11/download/release.yml

or by using kubectl

kubectl deploy -f https://github.com/kumaritanushree/secretgen-controller/releases/v0.0.11/download/release.yml

Container Images

secretgen-controller and secretgen-controller-package-bundle images are available in Github Container Registry.

OCI Image URLs

  • ghcr.io/kumaritanushree/secretgen-controller@sha256:47d0a8e806a4f1c16e3d094b708cffb38573764415808795942fa091e5f33df9
  • ghcr.io/kumaritanushree/secretgen-controller-package-bundle@sha256:94a843a896ed6124608cd2989ec9dd2996233d96f0337f79eea6c5571e1ea75c

Verify container image signature

Install cosign on your system https://docs.sigstore.dev/system_config/installation/
The container images are signed using Cosign with GitHub OIDC. To validate the signature of OCI images, run the following commands:

# Verifying secretgen-controller image
cosign verify ghcr.io/kumaritanushree/secretgen-controller@sha256:47d0a8e806a4f1c16e3d094b708cffb38573764415808795942fa091e5f33df9 --certificate-identity-regexp=https://github.com/kumaritanushree --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

# Verifying secretgen-controller-package-bundle image
cosign verify ghcr.io/kumaritanushree/secretgen-controller-package-bundle@sha256:94a843a896ed6124608cd2989ec9dd2996233d96f0337f79eea6c5571e1ea75c --certificate-identity-regexp=https://github.com/kumaritanushree --certificate-oidc-issuer=https://token.actions.githubusercontent.com -o text

Full Changelog: v0.0.9...v0.0.11

📂 Files Checksum

50bc549970e138767464b42138c4624080428e11bd4d662d0658a5ec8afd6eda  ./release.yml
c1e73063432cbb4e80cc6cacc12ca2c960266fbf60ca36fda006e84f21266496  ./package.yml
8f185deaa02964663bc3cedcb7c0af46151676e7c2abc2b69ff04178f87f28fe  ./package-metadata.yml
Assets 7
Loading