flux v2.9.5

HelmRelease.spec.chart.spec.verify

Verify contains the secret name containing the trusted public keys used to verify the signature and specifies which provider to use to check whether OCI image is authentic. This field is only supported for OCI sources. Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified.

2 fields
HelmRelease.spec.chart.spec.verify fields and descriptions
Field / TypeDescription
provider
string required

Provider specifies the technology used to sign the OCI Helm chart.

  • enum: ["cosign","notation"]
  • default: "cosign"
object

SecretRef specifies the Kubernetes Secret containing the trusted public keys.