// ChecksumForConfigMap calculates a checksum for the supplied config map. The exact algorithm depends on hash and prefix parameters func ChecksumForConfigMap(cm *v1.ConfigMap) string { … } // SignConfigMap calculates the supplied config map checksum and annotates it with it func SignConfigMap(cm *v1.ConfigMap) { … } // VerifyConfigMapSignature returns true if the config map has checksum annotation and it matches; false otherwise func VerifyConfigMapSignature(cm *v1.ConfigMap) bool { … }