Release Improvements Project

[upodroid]

This is an epic style issue tracking Release Improvements Project:

• Start generating SBOMs:
  • Bump ko and base OS Image test-infra#3342 ko 0.11+ generates and attaches SBOMs to docker images.
• Start enabling Workload Identity:
  • Workload Identity Enablement - Part Two test-infra#3448
  • Workload Identity Enablement - Part One test-infra#3372
  • Add service accounts to prowgen tool istio/test-infra#4180
  • Workload Identity Enablement - Part Three test-infra#3481
  • Workload Identity Enablement - Part Four test-infra#3506
• Delete service account keys
• Notarise our binaries for Mac test-infra#3536
• Add cosign to prow-tests image.
  • Add cosign to Prow Image and deploy backing KMS Keys test-infra#3385
• Manage all infra used/touched by the release via Infrastructure as Code
• SLSA Compliance
  • SLSA 1 Compliance test-infra#3440
  • SLSA 2 Compliance test-infra#3442
  • SLSA 3 Compliance #279
• Start signing nightly builds:
  • Start Signing our Releases hack#198
  • nightly/release docker images
    • knative.dev/serving
    • knative.dev/net-certmanager
    • knative.dev/net-contour
    • knative.dev/net-http01
    • knative.dev/net-istio
    • knative.dev/net-kourier
    • knative.dev/net-gateway-api
    • knative.dev/eventing
    • knative.dev/sample-controller
    • knative.dev/eventing-ceph
    • knative.dev/eventing-kogito
    • knative.dev/eventing-rabbitmq
    • knative.dev/sample-source
    • knative.dev/eventing-kafka
    • knative.dev/eventing-redis
    • knative.dev/eventing-github
    • knative.dev/eventing-gitlab
    • knative.dev/eventing-kafka-broker
    • knative.dev/eventing-autoscaler-keda
  • nightly/release kn binary builds
    • knative.dev/client
    • knative.dev/kn-plugin-admin
    • knative.dev/kn-plugin-event
    • knative.dev/kn-plugin-source-kafka
    • knative.dev/kn-plugin-source-kamelet
    • knative.dev/kn-plugin-quickstart
    • knative.dev/kn-plugin-func
• Create signing infrastructure:
  • Generate tests/dev keys
    • Add cosign to Prow Image and deploy backing KMS Keys test-infra#3385
  • Generate nightly keys
    • Add cosign to Prow Image and deploy backing KMS Keys test-infra#3385
  • Generate Keyless Signing service accounts
    • Create signing identities for cosign test-infra#3516
• Tighten IAM permissions for release/nightly project
• Enable Snyk and White-source scanning on knative repos  test-infra#3135
• Docs:
  • Add image/binary signing verification docs docs#5272

[krsna-m]

Related context knative/test-infra#1782

[upodroid]

Most images have been signed for 1.8 except serving, eventing and 3 eventing plugins.

Image references were not being created properly for the unsigned projects.

Details knative/serving#13408

I intend on completing the remaining images before 1.9 and verify them in the nightly releases.

[github-actions]

This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Reopen the issue with /reopen. Mark the issue as
fresh by adding the comment /remove-lifecycle stale.

[krsna-m]

/remove-lifecycle stale

[github-actions]

This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Reopen the issue with /reopen. Mark the issue as
fresh by adding the comment /remove-lifecycle stale.

[github-actions]

This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Reopen the issue with /reopen. Mark the issue as
fresh by adding the comment /remove-lifecycle stale.