Admaing commented on PR #1210: URL: https://github.com/apache/flink-kubernetes-operator/pull/1210#issuecomment-5797574717
Hi @gyfora, this PR is ready for review. Closes [FLINK-38798](https://issues.apache.org/jira/browse/FLINK-38798) — it makes the release script publish a Helm provenance file (`.tgz.prov`) next to the chart, so users can run `helm verify` / `helm pull --verify` / `helm install --verify`. - Docs + release script only, no runtime impact. - Verified end to end with a throwaway signing key: `helm verify` and `helm pull --verify` both succeed, and tampered archives / missing `.prov` / unrelated keyrings are all rejected. - CI on the latest commit (`7ee6be55`) is still `action_required` — it needs a maintainer to approve the workflow run. Could you take a look when you get a chance? Thanks! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
