☂️ Introduce Artifact Signing

[Gerrit91]

Description

As a result of #235, we want to introduce image signing using cosign. Some images (especially deployment images) are already signed.

The signing process needs to be integrated in all our CI pipelines. To make this more bullet-proof for the future, we introduced reusable workflows in https://github.com/metal-stack/actions-common.

We should also add image digests to the release vector as discussed from this issue in order to make the verification cleaner:

• Add image digests to release vector metal-robot#77

So we need to adapt these to the following repositories:

Docker Images

• Update actions workflows and dependencies. metal-image-cache-sync#26
• Update actions workflows and dependencies. metal-bmc#94
• Update actions workflows and dependencies. node-init#20
• Update actions workflows and dependencies. metal-ccm#123
• Allow configuration of multiple redirect URIs. zitadel-init#9
• https://github.com/metal-stack/duros-controller
• https://github.com/metal-stack/droptailer
• https://github.com/metal-stack/csi-lvm
• https://github.com/metal-stack/metal-deployment-base
• https://github.com/metal-stack/os-metal-extension
• https://github.com/metal-stack/machine-controller-manager-provider-metal
• Update actions workflows and dependencies. gardener-extension-provider-metal#496
• https://github.com/metal-stack/gardener-extension-csi-driver-lvm
• https://github.com/metal-stack/gardener-extension-audit
• https://github.com/metal-stack/firewall-controller-manager
• https://github.com/metal-stack/rethinkdb-exporter
• https://github.com/metal-stack/metal-metrics-exporter
• https://github.com/metal-stack/metal-api
• https://github.com/metal-stack/masterdata-api
• https://github.com/metal-stack/go-ipam
• https://github.com/metal-stack/metal-core
• https://github.com/metal-stack/gardener-extension-dns-powerdns
• https://github.com/metal-stack/gardener-extension-backup-s3
• https://github.com/metal-stack/pixie
• https://github.com/metal-stack/backup-restore-sidecar
• https://github.com/metal-stack/sonic-configdb-utils
• Use common Github Actions workflows. metal-apiserver#188
• https://github.com/metal-stack/metalctl
• https://github.com/metal-stack/mini-lab
• https://github.com/metal-stack/metal-images
• https://github.com/metal-stack/cluster-api-provider-metal-stack
• https://github.com/metal-stack/oci-mirror
• https://github.com/metal-stack/cli
• https://github.com/metal-stack/gardener-extension-ontap
• https://github.com/metal-stack/builder
• https://github.com/metal-stack/csi-driver-lvm
• https://github.com/metal-stack/go-dhcp-relay
• https://github.com/metal-stack/metallb-health-sidecar
• https://github.com/metal-stack/nftables-exporter
• https://github.com/metal-stack/metal-console
• https://github.com/metal-stack/firewall-controller
• https://github.com/metal-stack/gardener-extension-duros-provider
• chore(ci): actions-common metal-robot#110
• https://github.com/metal-stack/gardener-vpn-gateway
• https://github.com/metal-stack/rethinkdb-backup-tools-build
• https://github.com/metal-stack/mini-lab-ovmf
• https://github.com/metal-stack/chrony

Binary (optional)

• https://github.com/metal-stack/metal-hammer
• https://github.com/metal-stack/go-lldpd

OCI Images

• https://github.com/metal-stack/metal-roles
• https://github.com/metal-stack/releases
• https://github.com/metal-stack/helm-charts
• https://github.com/metal-stack/ansible-common
• https://github.com/metal-stack/metal-ansible-modules
• Gardener Extensions helm-charts (should be handled with docker images from above)