package.yml

apiVersion: policy.packaging.carvel.dev/v1alpha1
kind: PackagePolicy
metadata:
  name: carvel-policy
spec:
  pattern: "*.carvel.dev"
  threshold: 1
  authorities:
    - key:
        data: |
          -----BEGIN PUBLIC KEY-----
          ...
          -----END PUBLIC KEY-----
    - key:
        kms: awskms:///arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
    - keyless:
        url: https://fulcio.example.com
        identities:
        - issuer: https://example.com
          subject: .*@example.com