flux v2.0.1

HelmChart.spec.verify

Verify contains the secret name containing the trusted public keys used to verify the signature and specifies which provider to use to check whether OCI image is authentic. This field is only supported when using HelmRepository source with spec.type 'oci'. Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified.

2 fields
HelmChart.spec.verify fields and descriptions
Field / TypeDescription
provider
string required

Provider specifies the technology used to sign the OCI Artifact.

  • enum: ["cosign"]
  • default: "cosign"
object

SecretRef specifies the Kubernetes Secret containing the trusted public keys.