flux v2.0.1

OCIRepository.spec.verify

Verify contains the secret name containing the trusted public keys used to verify the signature and specifies which provider to use to check whether OCI image is authentic.

2 fields
OCIRepository.spec.verify fields and descriptions
Field / TypeDescription
provider
string required

Provider specifies the technology used to sign the OCI Artifact.

  • enum: ["cosign"]
  • default: "cosign"
object

SecretRef specifies the Kubernetes Secret containing the trusted public keys.