Metadata-Version: 2.1
Name: helm-sign
Version: 0.1.1
Summary: Gnupg based Signature Tool for Helm Charts
Home-page: https://gitlab.com/MatthiasLohr/helm-sign
Author: Matthias Lohr
Author-email: mail@mlohr.com
License: Apache License 2.0
Project-URL: Source, https://gitlab.com/MatthiasLohr/helm-sign
Project-URL: Tracker, https://gitlab.com/MatthiasLohr/helm-sign/issues
Description: # Helm Sign
        
        `helm-cli` is a small tool which allows for creating signatures for packed Helm charts.
        `helm` already offers an option for singing in verifying charts,
        however it lacks support for using an existing GnuPG environment (see https://github.com/helm/helm/issues/7599).
        
        
        ## Usage
        
        ### Install
        
        `helm-sign` is available in the Python Package Index (PyPI).
        Use the following command for installation:
        
        ```
        pip install helm-sign
        ```
        
        
        ### Sign
        
        `helm-sign` directly works on an already packed Helm chart (compressed tar file).
        
        Simple usage:
        ```
        helm-sign your-chart-1.0.0.tgz
        ```
        
        For options on how to define the key to be use, run `helm-sign -h`.
        
        
        ### Verify Signature
        
        `helm verify` needs the public key to be verified against in binary format.
        Therefore, this is how verification can be done:
        
        ```bash
        cd `mktemp -d`
        # download public key (Matthias Lohr) and convert to binary format
        curl https://keys.openpgp.org/vks/v1/by-fingerprint/F4A091E1F243C3748FFF661A8FC3060F80C31A0A | gpg --dearmor > mlohr.gpg
        # download chart and provenance (signature) file
        wget https://helm-charts.mlohr.com/hcloud-cloud-controller-manager/hcloud-cloud-controller-manager-2.0.0.tgz
        wget https://helm-charts.mlohr.com/hcloud-cloud-controller-manager/hcloud-cloud-controller-manager-2.0.0.tgz.prov
        # verify using helm CLI
        helm verify --keyring ./mlohr.gpg hcloud-cloud-controller-manager-2.0.0.tgz
        ```
        
        ## License
        
        This project is published under the Apache License, Version 2.0.
        See [LICENSE.md](https://gitlab.com/MatthiasLohr/helm-sign/-/blob/master/LICENSE.md) for more information.
        
        Copyright (c) by [Matthias Lohr](https://mlohr.com/) &lt;[mail@mlohr.com](mailto:mail@mlohr.com)&gt;
        
Platform: UNKNOWN
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3.7
Classifier: Programming Language :: Python :: 3.8
Requires-Python: >=3.7.*, <4
Description-Content-Type: text/markdown
