Repository navigation
NamespacedImageValidatingPolicy[Bug] The Sigstore section of the docs is using the deprecated ClusterPolicy instead of the newer ImageValidatingPolicy / NamespacedImageValidatingPolicy #2101
Description
Activity
/assign
Hi team! 👋
I've just opened this PR to resolve the ongoing issues with the Sigstore image verification documentation.
As discussed in the related issues, I have completely migrated all the deprecated ClusterPolicy and verifyImages examples over to the new CEL-based ImageValidatingPolicy. I also fixed the broken keyless signing examples and added a Verify Images Rule section to the CEL migration guide.
Please let me know if any further tweaks are needed or if anything else should be covered in this migration. Happy to make adjustments!
Page link
https://kyverno.io/docs/policy-types/cluster-policy/verify-images/sigstore/
Description
The documentation about Sigstore image signature verification is using the deprecated
ClusterPolicy.There are some issues touching upon this topic, but none for the whole section.
This was discussed in the discussion kyverno/kyverno#16602
Expected behavior
The documentation should use the non-deprecated
ImageValidatingPolicyorNamespacedImageValidatingPolicyCRs.Whether or not it is useful to keep the examples using the deprecated
ClusterPolicyis up to the maintainers.Slack discussion
No response