6 Commits

Author SHA1 Message Date
Tim Bannister 77df670627 Tweak wording about which container images are signed 2022-04-13 10:46:31 +01:00
Tim Bannister 5866a6f690 Revise download page SBoM advice
Quote a command to avoid any risk of side-effects from a malicious BoM
Avoid a use of grep where awk can achieve the same outcome

Co-authored-by: Sascha Grunert <sgrunert@redhat.com>
2022-04-13 10:46:30 +01:00
Tim Bannister b7834e367f Fix download page introduction
Remove a level 1 heading; we don't use these.
2022-04-13 10:46:28 +01:00
Pushkar Joglekar ba6776b2a6 Task Page for Verifying Signed Images (#32184)
* Add container image signing docs

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

* Creates a task page to verify signed control plane container images

* Added info about cosigned and why we need cosign in experimental mode

Updates based on PR review

Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* Uses K8s SBoM to get list of signed images

Apply suggestions from code review

Co-authored-by: Qiming Teng <tengqm@outlook.com>
Co-authored-by: Chris Negus <cnegus@redhat.com>

* Add current scope of sign/verify

Co-authored-by: Sascha Grunert <sgrunert@redhat.com>
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Qiming Teng <tengqm@outlook.com>
Co-authored-by: Chris Negus <cnegus@redhat.com>
2022-04-12 08:29:23 -07:00
Sascha Grunert 391408a053 Add container image signing docs
This patch outlines basic documentation about how container image
signing works and which images are signed for official Kubernetes
releases.

Refers to https://github.com/kubernetes/enhancements/issues/3031

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2022-02-03 11:15:19 +01:00
Jim Angel 7edf890373 Adding a release page under "Release Information" 2021-05-11 17:18:30 -05:00