signatureKeys (kind: AppProject)

Used to verify the signatures of Git repository commits or artifacts to ensure their authenticity and integrity.

• https://argo-cd.readthedocs.io/en/stable/user-guide/gpg-verification/#configure-using-declarative-setup

Oficial example

apiVersion: argoproj.io/v1alpha1
kind: AppProject 
metadata:
  name: gpg
  namespace: argocd
spec:
  clusterResourceWhitelist:
  - group: '*'
    kind: '*'
  description: GnuPG verification
  destinations:
  - namespace: '*'
    server: '*'
  namespaceResourceWhitelist:
  - group: '*'
    kind: '*'
  signatureKeys:
  - keyID: 4AEE18F83AFDEB23
  sourceRepos:
  - '*'

Related

• ArgoCD GnuPG signature verification
• ArgoCD RBAC: jwtTokens
• Terraform resource: argocd_project: signature_keys

See also

• ArgoCD projects: kind: AppProject, sourceRepos, signatureKeys, Terraform resource: argocd_project
• Argo CD, ArgoCD RBAC, GPG argocd, argocd --help, Flux, argoproj.io, kind: Application, kind: AppProject, kind: ApplicationSet, ArgoCD best practices, argocd-cm, Versions