The safeguards map / 3.7 Admission and owner settings
Helm (provenance and integrity)
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
Helm's chart verification checks a chart archive against its OpenPGP-signed provenance file, so a user can tell whether the archive was altered and whether the signer is trusted.
Where it sits
3.7 Admission and owner settings (primary): Verifies a chart package against its signed provenance file and the signer's key in the user's keyring, with a verify command and a verify flag on install, and reports a mismatch as a sign the archive was tampered with.
The file hashes in the provenance file do not match the hash of the archive file. This indicates that the archive has been tampered with.
captured
To verify during an install, use the --verify flag.
captured
The key used to sign the file is not in your keyring.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who run it
- Runs
- by hand
- Policy comes from
- owner-entered settings
Handoffs
consumes Provenance and signatures: Helm provenance file (.prov, signed with OpenPGP)
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.