How to use OCI images as the source of truth for continuous delivery

This post introduces the concept of using OCI images as the source of truth for GitOps deployments, moving beyond traditional Git repositories. It details how GitLab's Container Registry, CI/CD, and integration with Flux CD and Sigstore Cosign can be used to push, sign, and deploy Kubernetes manifests as OCI artifacts. The post highlights security benefits like artifact signing and verification, and improved delivery control through CI/CD pipelines. An example CI/CD job demonstrates pushing and signing OCI images, and the use of the GitLab Agent for Kubernetes for cluster access.