Artifacthub.io presence: verified, official and signed artifacts

[pmalek]

Problem statement

Kong's charts are present in artifacthub.io at: https://artifacthub.io/packages/search?repo=kong&sort=relevance&page=1.

Charts published there have the option to be designated as:

• signed
• coming from a verified publisher
• official

This issue tracks the decision making and implementation of marking our ArtifactHub charts as either (or all) of the above.

[pmalek]

Kong charts are not marked as official and verified.

Achieved through:

• verified https://github.com/Kong/charts/blob/cb64a3bea9ea42a6fa1e51e3b2dfe34d25cab9ef/artifacthub-repo.yml
• official [OFFICIAL] kong artifacthub/hub#4332

[sandromodarelli]

@justindavies do we want to be compliant with artifacthub and release charts there? we are still missing the chart signing to have the "official" stamp on the website