Graduate release artifact signing to beta

[saschagrunert]

Updating the release artifact signing KEP to beta.

Refers to #3031

cc @kubernetes/sig-release-leads @kubernetes/sig-release @kubernetes/release-engineering

[puerco]

I think I would do a small change here. The change suggested below is just for defining what we consider to be beta: We can sign both files and images.

My thinking now is that for GA we should enlist a concrete set of artifacts we'd like to sign and graduate the KEP when done (ie attestations from the promoter, stage provenance, release provenance, etc).

[saschagrunert]

@kubernetes/sig-release PTAL

[puerco]

Thanks @saschagrunert !
/lgtm
/approve

[justaugustus]

/lgtm
/approve

[saschagrunert]

/assign @johnbelamaric

[cpanato]

thanks!
/approve
/lgtm

[saschagrunert]

@kubernetes/prod-readiness-reviewers PTAL

[johnbelamaric]

Sorry, this isn't on the KEP enhancements sheets so I did not see it until now. Just luck that I saw it in fact...

/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: cpanato, johnbelamaric, justaugustus, puerco, saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• keps/prod-readiness/OWNERS [johnbelamaric]
• keps/sig-release/OWNERS [cpanato,johnbelamaric,justaugustus,puerco,saschagrunert]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment