第 14 章 Verifying image signatures

Procedure

1. In the RHACS portal, select Platform Configuration Integrations.
2. Scroll to Signature Integrations and click Signature.
3. Click New integration.
4. Enter a name for the Integration name.
5. Click Cosign public Keys Add a new public key.
6. Enter the Public key name.
7. For the Public key value field, enter the PEM-encoded public key.
8. (Optional) You can add more than one key by clicking Add a new public key and entering the details.
9. Click Save.

Procedure

1. In the RHACS portal, select Platform Configuration Integrations.
2. Scroll to Signature Integrations and click Signature.
3. Click New integration.
4. Enter a name for the Integration name.
5. Click Cosign certificates Add a new certificate verification.
6. Enter the Certificate OIDC Issuer. You can optionally use regular expressions in RE2 Syntax.
7. Enter the Certificate identity. You can optionally use regular expressions in RE2 Syntax.
8. (Optional) Enter the Certificate Chain PEM encoded to verify certificates. If no chain is provided, certificates are verified against the Fulcio root.
9. (Optional) Enter the Certificate PEM encoded to verify the signature.
10. (Optional) You can add more than one certificate verification by clicking Add a new certificate verification and entering the details.
11. Click Save.