Using and validating signed container images in kubernetes / OKD / OpenShift

install connaisseur in your cluster

OKD / OpenShift 4

• login with cluster admin rights
• create namespace: oc new-project infra-connaisseur
• edit co-values.yaml (or at least check it)
• install from here with: helm install sigpoc connaisseur/helm --atomic --namespace infra-connaisseur -f co-values.yaml
• Add the following label to the namespaces / projects you want to enable: oc label ns/mysupernamespace securesystemsengineering.connaisseur/webhook=validate
• ...