headlamp-k8s / headlamp

A Kubernetes web UI that is fully-featured, user-friendly and extensible
https://headlamp.dev
Apache License 2.0
2.22k stars 156 forks source link

headlamp helm chart should be signed #1989

Closed illume closed 2 months ago

illume commented 5 months ago

Artifact hub is complaining that the helm chart is not signed.

image

Note: there's an issue for all of our releases being signed here: https://github.com/headlamp-k8s/headlamp/issues/2092


From the helm documentation

To sign a chart, use the '--sign' flag. In most cases, you should also provide '--keyring path/to/secret/keys' and '--key keyname'.

$ helm package --sign ./mychart --key mykey --keyring ~/.gnupg/secring.gpg

If '--keyring' is not specified, Helm usually defaults to the public keyring unless your environment is otherwise configured.

knrt10 commented 4 months ago

Working on this