TKN-PIPELINE-VERIFY(1)

🌸 NAME 🌸

Okay bestie, welcome to TKN-PIPELINE-VERIFY(1) — the manual page for tkn-pipeline-verify, aka the little command that says “Verify Tekton Pipeline” 💅

✨ SYNOPSIS ✨

tkn pipeline verify

💖 DESCRIPTION 💖

Verify the Tekton Pipeline with a private key file you provide or a KMS reference. The key files support ecdsa, ed25519, and rsa — no cap, those are the vibes 🔥

For KMS, here’s the tea:

• GCP — this should have the structure of gcpkms://projects/<project>/locations/<location>/keyRings/<keyring>/cryptoKeys/<key>, where location, keyring, and key are filled in appropriately. Run gcloud auth application-default login to authenticate.
• Vault — this should have the structure of hashivault://<keyname>, where the keyname is filled out appropriately.
• AWS — this should have the structure of awskms://[ENDPOINT]/[ID/ALIAS/ARN] (endpoint optional).
• Azure — this should have the structure of azurekms://[VAULT_NAME][VAULT_URL]/[KEY_NAME].

🎀 OPTIONS 🎀

• --allow-missing-template-keys[=true] — if true, ignore any errors in templates when a field or map key is missing in the template. Only applies to golang and jsonpath output formats.
• -h, --help[=false] — help for verify.
• -K, --key-file="" — key file.
• -m, --kms-key="" — KMS key url.
• -o, --output="" — output format. One of: (json, yaml, name, go-template, go-template-file, template, templatefile, jsonpath, jsonpath-as-json, jsonpath-file).
• --show-managed-fields[=false] — if true, keep the managedFields when printing objects in JSON or YAML format.
• --template="" — template string or path to template file to use when -o=go-template, -o=go-template-file. The template format is golang templates [http://golang.org/pkg/text/template/#pkg-overview].

🦋 OPTIONS INHERITED FROM PARENT COMMANDS 🦋

• -c, --context="" — name of the kubeconfig context to use (default: kubectl config current-context).
• -k, --kubeconfig="" — kubectl config file (default: $HOME/.kube/config).
• -n, --namespace="" — namespace to use (default: from $KUBECONFIG).
• -C, --no-color[=false] — disable coloring (default: false).

🌈 EXAMPLE 🌈

Verify a Pipeline signed.yaml:

tkn pipeline verify signed.yaml -K=cosign.pub or using kms
tkn pipeline verify signed.yaml
-m=gcpkms://projects/PROJECTID/locations/LOCATION/keyRings/KEYRING/cryptoKeys/KEY/cryptoKeyVersions/VERSION

That layout is literally what the page gives us, bestie — keep those strings exact, especially the -m=... KMS URL 🫶

🔥 SEE ALSO 🔥

• tkn-pipeline(1)

Source/version sign-off, because we respect the footer: this page is auto-generated by spf13/cobra, and its manual label is TKN-PIPELINE-VERIFY(1). No date in the footer, so I’m not gonna invent one — periodt 💜