Harbor Deprecates Notary v1 Support in v2.9.0

Products

• VMware Tanzu Kubernetes Grid Integrated Edition

Issue/Introduction

Helm chart was signed and pushed to Harbor using PGP (helm package --sign) in Harbor 2.9+ but the UI in Harbor shows not signed: 



Environment

• Harbor 2.9+
• VMware Tanzu Kubernetes Grid Integrated Edition

Cause

helm package --sign command uses PGP to sign the helm chart and it is not supported in Harbor 2.9+

• Harbor Notary integration deprecation proposal
• Harbor Deprecates Notary v1 Support in v2.9.0

Resolution

Migrate to using cosign or notation or both starting in Harbor 2.9+

• Implementing Content Trust
• Sign Artifacts with Cosign or Notation

.