Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Support for Cosign 2.0 #6401

Closed
2 tasks done
chipzoller opened this issue Feb 25, 2023 · 3 comments · Fixed by #7248
Closed
2 tasks done

[Feature] Support for Cosign 2.0 #6401

chipzoller opened this issue Feb 25, 2023 · 3 comments · Fixed by #7248
Assignees
Labels
enhancement New feature or request imageVerify Image verification support

Comments

@chipzoller
Copy link
Member

Problem Statement

Cosign 2.0 was released and brings breaking changes with it. We need to assess the changes and support it in Kyverno.

Solution Description

Support Cosign 2.0

Alternatives

No response

Additional Context

No response

Slack discussion

No response

Research

  • I have read and followed the documentation AND the troubleshooting guide.
  • I have searched other issues in this repository and mine is not recorded.
@chipzoller chipzoller added enhancement New feature or request imageVerify Image verification support labels Feb 25, 2023
@chipzoller chipzoller added this to the Kyverno Release 1.10.0 milestone Feb 25, 2023
@chipzoller chipzoller removed this from the Kyverno Release 1.10.0 milestone Mar 23, 2023
@flxw
Copy link

flxw commented Apr 13, 2023

I am now looking into this.
Originally, I just wanted to add support to Kyvernos policies for offline verification when I realized that would require upgrading to cosign 2.0.
I'll report back as soon as I have something we can iterate on.

@chipzoller
Copy link
Member Author

This one is going to likely require some design and discussion as we now need to also reconcile Notary v2 support which Kyverno is adding into 1.10.

@JimBugwadia
Copy link
Member

Hi @flxw - let me know if you would like to discuss your findings in an upcoming contributor meeting or a separate session.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request imageVerify Image verification support
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants