kube-notary
kube-notary copied to clipboard
codenotary
A Kubernetes watchdog for verifying image trust with Codenotary (www.codenotary.com)
In the CNLC branch, if a secret is updated, kube-notary does not realize it, as it is exposed as an environment variable. * https://kubernetes.io/docs/concepts/configuration/secret/#environment-variables-are-not-updated-after-a-secret-update The behavior of KubeNotary should be...
Add Project and stage tags and notarization metadata. from: ```vcn n --silent --attr GitLab="$CI_COMMIT_SHA" docker://$CONTAINER_IMAGE:$CI_COMMIT_SHA ``` to ```vcn n --silent --attr GitLab="$CI_COMMIT_SHA" --attr project="p1233" --attr stage="test" docker://$CONTAINER_IMAGE:$CI_COMMIT_SHA ``` and 
It would be great if this helm chart becomes available at https://hub.helm.sh/ What would be required to get it there? It would allow people to add the repository and install...
I deployed Kube-Notary into our OpenShift environment using the deployment scripts in this repo (kubernetes/kube-notary/templates): Step by step I ran: ``` oc login -u system:admin kubectl apply -f serviceaccount.yaml oc...
In order to make kube-notary discovered by the prometheus operator: - the endpoint resource needs the following label: ```yaml labels: k8s-app: kube-notary ``` - the ServiceMonitor resource has to be...
Error returned: ``` time="2019-10-11T14:34:15Z" level=error msg="Cannot verify \"docker-pullable://cnioimages2609.azurecr.io/hello-world@sha256:0016fef6ce1d57cb5d25bdbb5f6762165a7d4e73b6f07bc5179d22d094f35f83\" in pod \"hello-world-deployment-7cb8bf4c69-v6kt7\": reading image cnioimages2609.azurecr.io/hello-world@sha256:0016fef6ce1d57cb5d25bdbb5f6762165a7d4e73b6f07bc5179d22d094f35f83: unsupported status code 401" ``` Maybe related to this https://github.com/vchain-us/kube-notary/blob/95b8da57040b4db32e78c55a57ad8c58758cc15d/cmd/kubewatch/root.go#L25
I am not sure about the state of this project but the link to notary cloud in the README is dead
Metadata
Owner
Metadata
A Kubernetes watchdog for verifying image trust with Codenotary (www.codenotary.com)