wave Hello everyone does k3s supports cosign sigstore natively to verify the signature of signed container images As of kubernetes 1 25 this feature is native <https kubernetes io docs tasks administer cluster verify signed images |k8s v1 25 sigstore cosign support Verify Signed Container Images> However for k3s I only see the support of <https sse secure systems github io connaisseur v2 6 4 compatibility|k3s with connaisseur> Where should I ask this

Okay great thank you < creamy pencil 82913> smile I will try on k3s the HELM chart Sigstore Policy Controller Admission Controller Source <https github com sigstore docs blob ba2468317377e448cdda4b8a51500cf3d700b662 content en policy controller installation md|content en policy controller installation md> And maybe I try connaisseur but I imagine I prefer Sigstore over connaisseur since Sigstore seems to be the official upstream Kubernetes choice

wave Hello everyone does k3s supports cosign sigstore nativ rancher-users #general

Title

kind-librarian-59515

10/19/2022, 10:26 AM

👋 Hello everyone, does k3s supports cosign / sigstore natively to "verify the signature of signed container images"? As of kubernetes 1.25, this feature is native: k8s v1.25 sigstore cosign support - Verify Signed Container Images However for k3s, I only see the support of k3s with connaisseur. Where should I ask this?

👀 2

creamy-pencil-82913

10/19/2022, 4:02 PM

K3s is a CNCF certified Kubernetes distro. Anything built in to core Kubernetes and required for conformance will work on K3s.

👀 1

Although I will note, this document is talking about signing of the K8s release artifacts, so it is not something that is built in to Kubernetes itself, rather it is part of the core Kubernetes software supply chain. We are not currently signing our release images or binaries.

👀 1

You can absolutely deploy the sigstore admission controller though, It will work on any cluster to verify images used by your pods.

🙌 1

👀 1

kind-librarian-59515

10/19/2022, 4:13 PM

Okay great thank you @creamy-pencil-82913 😄, I will try on k3s the HELM chart Sigstore Policy Controller Admission Controller. Source : content/en/policy-controller/installation.md And maybe I try connaisseur, but I imagine I prefer Sigstore over connaisseur since Sigstore seems to be the official upstream Kubernetes choice.

7 Views

#general Join Slack