Hi JB, Helm Chart has its own format called *.tgz.prov file, which includes both checksum and signature, which you can find here, https://dist.apache.org/repos/dist/dev/incubator/polaris/helm-chart/1.0.0-incubating/polaris-1.0.0-incubating.tgz.prov
ygu@FM4LQ4GJ90 Downloads % cat polaris-1.0.0-incubating.tgz.prov -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 apiVersion: v2 appVersion: 1.0.0-incubating description: A Helm chart for Apache Polaris (incubating) home: https://polaris.apache.org/ icon: https://raw.githubusercontent.com/apache/polaris/main/site/static/img/logos/polaris-brandmark.png keywords: - - polaris - - iceberg maintainers: - - name: MonkeyCanCode - - name: adutra - - name: collado-mike - - name: gerrit-k - - name: snazy name: polaris sources: - - https://github.com/apache/polaris type: application version: 1.0.0-incubating ... files: polaris-1.0.0-incubating.tgz: sha256:77252fcbe0ea640c7093c288bea4a058845f21fbdd14e6e00c7128e3e1064030 -----BEGIN PGP SIGNATURE----- wsFcBAEBCgAQBQJoXKR3CRDFGGdPrZQPUQAAnEUQAKnkGYfCKZrFDFNiJ+tpEUkc 0rvJbNqsX8GRf3utnFXGRKRsr5SF77CHxs5osCtIRkCA1fbPbSrmvNVXE7SFlYBA Xahvq37RtTO4cXR5kQijljtrH3Re7Tp/mwDx/2oqQfnsJDsIrtfolZOut1ypPrah jj2em0Rz4OAs0g/jtB15RK2faFfELaIcExfWUEA0ZE4d8e14IV3gfH7Sos5wT3L1 ysmJVAKLfByg56TDX4+OctFIOOX4yZXLazyrbCoWwdaCoxzHf4ugrF9mht5MHsRZ B8u/pIPO0Ygijz66GDLpRoIx7Kp11FI2LvoUfcvNnR/1lcHS1ATCwZOub6zxxPs/ /WIOhSRk4AqOV88dZlkUYqEIbceo26dUdLjsG2Z2koEGcUxRP18RU21L3YRIuQTy b2+ZMmKC6pRGl1XwhnSMgPZfRdq79HCAmXU2fMxE0mfjUgHFgV68WDzAa32Acj40 vCi3F5h+mQUuxvlPTtd6GFakrIbeP4xIeGURYhLgRwTXLQhzaopLxheSy17q/+fK SZlfAP8nICQYCx7KCLciE0BWJ1g0fcMEcJyabGHdevi3W7SKhFtm/6+zhuQ2kT/J mFh6kE7wnXR8jIdhs8Wp12tqBJLZS5hoeuoJEElkCnxD3dNNQ67Me6032hGtHTQH 49HjQhbIhY1I1shqA5Tf =FV6W -----END PGP SIGNATURE-----% Yufei On Fri, Jun 27, 2025 at 10:25 PM Jean-Baptiste Onofré <j...@nanthrax.net> wrote: > Hi Yufei > > Can you please add checksum and signature for the Helm Chart package > ( > https://dist.apache.org/repos/dist/dev/incubator/polaris/helm-chart/1.0.0-incubating/ > ) > ? > > All artifacts part of a release (hosted on dist repo) have to be > signed and checksum has to be provided, else the release is "invalid". > > Thanks, > Regards > JB > > On Sat, Jun 28, 2025 at 1:34 AM Yufei Gu <flyrain...@gmail.com> wrote: > > > > Hi everyone, > > > > I propose that we release the following RC as the official Apache Polaris > > 1.0.0-incubating release. > > > > This corresponds to the tag: apache-polaris-1.0.0-incubating-rc4 > > * > > > https://github.com/apache/polaris/commits/apache-polaris-1.0.0-incubating-rc4 > > * > > > https://github.com/apache/polaris/tree/0e901982e47cae94f6934ea14e1d868d92fa13ba > > > > The release tarball, signature, and checksums are here, including both > > source code and binary distributions: > > * > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/apache-polaris-1.0.0-incubating/ > > > > > > Helm chart (You can verify with the command `helm verify`): > > > > * > > > https://dist.apache.org/repos/dist/dev/incubator/polaris/helm-chart/1.0.0-incubating/ > > NB: the docker images (polaris-server and polaris-admin) will be > published > > on DockerHub once release vote passes. > > > > You can find the KEYS file here: > > * https://downloads.apache.org/incubator/polaris/KEYS > > > > Convenience binary artifacts are staged on Nexus. The Maven repository > URL > > is: > > * > https://repository.apache.org/content/repositories/orgapachepolaris-1024/ > > > > Please download, verify, and test. > > > > Please vote in the next 72 hours. > > > > [ ] +1 Release this as Apache polaris 1.0.0-incubating > > [ ] +0 > > [ ] -1 Do not release this because... > > > > Only PPMC members and mentors have binding votes, but other community > > members are > > encouraged to cast non-binding votes. This vote will pass if there are 3 > > binding +1 votes and more binding +1 votes than -1 votes. > > > > NB: if this vote passes, a new vote has to be started on the Incubator > > general mailing list. > > > > Yufei >
