develop Kustomize plugin to sign images within the manifests using cosign tool

[developer-guy]

Is your feature request related to a problem? Please describe.

It is not related to a problem, it is more like a new feature request.

Describe the solution you'd like

Recently, I came across a git repository called sopsencodedsecrets. Then, I searched for Kustomize plugins and realized that it is easy to develop plugins using Go for extending Kustomize ¹. So, I'm proposing a new plugin called sign-with-cosign-plugin which helps us to sign all the images within the manifest files for Deployment, DaemonSet, Pod, etc by using cosign ².

Additional context

We (w/@Dentrax @erkanzileli) are the volunteers to do this issue as well.

Footnotes

1. Extending Kustomize with Go Plugins ↩

2. cosign ↩

[k8s-ci-robot]

@developer-guy: This issue is currently awaiting triage.

SIG CLI takes a lead on issue triage for this repo, but any Kubernetes member can accept issues by applying the triage/accepted label.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[KnVerey]

I'm glad to hear your interest in extending Kustomize! Please note that all extension mechanisms are still in alpha, and Go plugins are currently slated for deprecation because of the issues described in the docs. If you move forward with this extension, I would encourage you to build it as a container-based KRM function and help us improve that extension development experience with any feedback you may have.

You can find more information on the vision for Kustomize extensions in this provisional KEP: kubernetes/enhancements#2953.

Since this would be an extension, I don't think we need to keep a tracking issue open on this repo. Please reopen if I've misunderstood.
/close

[k8s-ci-robot]

@KnVerey: Closing this issue.

In response to this:

I'm glad to hear your interest in extending Kustomize! Please note that all extension mechanisms are still in alpha, and Go plugins are currently slated for deprecation because of the issues described in the docs. If you move forward with this extension, I would encourage you to build it as a container-based KRM function and help us improve that extension development experience with any feedback you may have.

You can find more information on the vision for Kustomize extensions in this provisional KEP: kubernetes/enhancements#2953.

Since this would be an extension, I don't think we need to keep a tracking issue open on this repo. Please reopen if I've misunderstood.
/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.