imjasonh/shipwright-cosign-example
1
0
Fork 0
mirror of https://github.com/imjasonh/shipwright-cosign-example synced 2026-07-14 11:36:05 +00:00
Code Activity

update README

Browse source
This commit is contained in:
Jason Hall 2021-04-01 22:05:00 -04:00
parent 914c9ccbf9
commit 1f73be4f49
1 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
README.md
View file

@ -19,7 +19,7 @@ kubectl apply -f https://raw.githubusercontent.com/shipwright-io/build/master/sa
kubectl apply -f https://raw.githubusercontent.com/ImJasonH/shipwright-cosign-example/main/sa.yaml
kubectl apply -f https://raw.githubusercontent.com/ImJasonH/shipwright-cosign-example/main/secret.yaml
kubectl create secret generic dockerhub-dockerconfig \
--from-file=.dockerconfigjson=~/.docker/config.json \
--from-file=.dockerconfigjson=$HOME/.docker/config.json \
--type=kubernetes.io/dockerconfigjson
```
@ -46,7 +46,8 @@ kubectl edit build kaniko-build
---
Up until this point, everything is the standard process for installing, setting up, and using Shipwright. This Build includes a new `.spec.sign` field, which describes how to sign the built image:
Up until this point, everything is the standard process for installing, setting up, and using Shipwright.
This Build, however, includes a new `.spec.sign` field, which describes how to sign the built image:
```
sign:
@ -55,7 +56,8 @@ sign:
name: passphrase
```
This tells Shipwright to use the `cosign.key` found in the repo to sign the built image. That key is encrypted, and the Secret named `passphrase` includes the passphrase to decrypt it.
This tells Shipwright to use the `cosign.key` found in the repo to sign the built image.
That key is encrypted, and the Secret named `passphrase` includes the passphrase to decrypt it.
4. Create a BuildRun to execute the Build