Enhancement Description

• One-line enhancement description (can be used as a release note): Signing release artifacts
• Kubernetes Enhancement Proposal: TBD
• Discussion Links:
  • Attach relevant KEPs to roadmap/vision sig-release#1724
  • sign SBOMs through cosign tool right after generated it through bom tool release#2286
  • Signing artifacts with cosign release#2227
  • Signing releases with GPG keys release#914
• Primary contact (assignee): @saschagrunert
• Responsible SIGs: SIG Release
• Enhancement target (which target equals to which milestone):
  • Alpha release target (x.y): TBD
  • Beta release target (x.y): TBD
  • Stable release target (x.y): TBD
• Alpha
  • KEP (k/enhancements) update PR(s): KEP-3031: Add release artifact signing KEP #3061
  • Code (k/k) update PR(s): Implement container image signing MVP (KEP-3031) release#2383
  • Docs (k/website) update PR(s):
    Add container image signing docs website#31610
    Task Page for Verifying Signed Images website#32184
• Beta
  • Prework: Follow-ups on the container Image signing MVP release#2513
  • KEP (k/enhancements) update PR(s):
    Graduate release artifact signing to beta #3323
    KEP-3031: Update signing KEP to match new scope #3451
  • Code (k/k) update PR(s): Implement release artifact signing beta graduation (KEP-3031) release#2586
  • Docs (k/website) update(s): Document Kubernetes release artifact file signatures website#35341

/area release-eng
/sig release
/cc @kubernetes/sig-release-leads @kubernetes/release-managers @kubernetes/release-engineering
refers to kubernetes/sig-release#1724
depends on #3027