Document how to validate kubectl binary against checksum / signature

[tcarland]

There are no details or instructions on how to validate the binary downloaded from this page via some form of checksum, sha256 or otherwise. For automation purposes, eg. ansible playbook, being able to validate any binary downloads is a requirement of project stakeholders.

[tcarland]

The site doesn't allow browsing, but the file is there as kubectl.sha256 afterall. Might be worth mentioning this in the document?

[sftim]

/retitle Document how to validate kubectl binary against checksum / signature
/language en
/kind feature
/triage accepted

The page in question is https://kubernetes.io/docs/tasks/tools/install-kubectl/

[sftim]

To fix this:

• update https://kubernetes.io/docs/tasks/tools/install-kubectl/ to use download links from https://dl.k8s.io/
  for example https://dl.k8s.io/v1.19.0/bin/linux/amd64/kubectl
• also explain to readers that checksum files are available that they can use to compare binaries obtained from elsewhere
  for example https://dl.k8s.io/v1.19.0/bin/linux/amd64/kubectl.sha256

The {{< skew … >}} and {{< param "fullversion" >}} shortcodes are useful for automatically filling in the current Kubernetes version.

/help
/sig cli

[k8s-ci-robot]

@sftim:
This request has been marked as needing help from a contributor.

Please ensure the request meets the requirements listed here.

If this request no longer meets these requirements, the label can be removed
by commenting with the /remove-help command.

In response to this:

To fix this:

• update https://kubernetes.io/docs/tasks/tools/install-kubectl/ to use download links from https://dl.k8s.io/
  for example https://dl.k8s.io/v1.19.0/bin/linux/amd64/kubectl
• also explain to readers that checksum files are available that they can use to compare binaries obtained from elsewhere
  for example https://dl.k8s.io/v1.19.0/bin/linux/amd64/kubectl.sha256

The {{< skew … >}} and {{< param "fullversion" >}} shortcodes are useful for automatically filling in the current Kubernetes version.

/help
/sig cli

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[nate-double-u]

I may be able to help with this
/assign