k0s binary signing docs

Signed-off-by: Alexey Makhov <[email protected]>
k0sproject · Oct 10, 2023 · 3b5bec6 · 3b5bec6
1 parent 4109036
commit 3b5bec6
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/docs/verifying-signs.md b/docs/verifying-signs.md
@@ -0,0 +1,12 @@
+# Verifying Signed Binaries
+
+K0smotron team provides signed binaries for k0s. The signatures are created using [cosign](https://docs.sigstore.dev/signing/quickstart/). 
+Public key and signature files are available for download from the [releases page](https://github.com/k0sproject/k0s/releases/latest). 
+Binaries can be verified using the `cosign` tool, for example:
+
+```shell
+cosign verify-blob \
+  --key https://github.com/k0sproject/k0s/releases/download/v1.28.2%2Bk0s.0/cosign.pub \
+  --signature https://github.com/k0sproject/k0s/releases/download/v1.28.2%2Bk0s.0/k0s-v1.28.2+k0s.0-amd64.sig \
+  --payload k0s-v1.28.2+k0s.0-amd64
+```
diff --git a/mkdocs.yml b/mkdocs.yml
@@ -24,6 +24,7 @@ nav:
           - Using custom CA certificate (advanced): custom-ca.md
       - System Requirements: system-requirements.md
       - External runtime dependencies: external-runtime-deps.md
+      - Verifying Signed Binaries: verifying-signs.md
   - Maintenance:
       - Upgrade: upgrade.md
       - Backup/Restore: backup.md