HelmChart / OCIRepository - KMS Support for spec.verify #1060
Description
Is it planned to add the KMS support for spec.verify for both HelmChart / OCIRepository?
Today, only storing the public key in a Secret is supported with spec.verify.secretRef.name:
- https://fluxcd.io/flux/components/source/helmcharts/#verification
- https://fluxcd.io/flux/components/source/ocirepositories/#verification
It would be great to add the KMS support as an alternative, see Cosign ref here: https://docs.sigstore.dev/cosign/kms_support/