forked from securesign/sigstore-ocp
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* add kind Signed-off-by: Sally O'Malley <[email protected]> * add servicemonitor crd to kind Signed-off-by: Sally O'Malley <[email protected]> * update chart version & add test cert/keys Signed-off-by: Sally O'Malley <[email protected]> * update cosign deployment with runAsUser & Keycloak->OIDC Signed-off-by: Sally O'Malley <[email protected]> * add gitleaks pre-commit to ignore test cert & keys Signed-off-by: Sally O'Malley <[email protected]> * add helm test Signed-off-by: Sally O'Malley <[email protected]> * add kind config file Signed-off-by: Sally O'Malley <[email protected]> * comment workflow * cosign deployment update Signed-off-by: Sally O'Malley <[email protected]> * kind cluster merge don't overwrite kubeconfig Signed-off-by: Sally O'Malley <[email protected]> * uncomment gh action test * add ci ct-install values Signed-off-by: Sally O'Malley <[email protected]> * add oc to gh workflow Signed-off-by: Sally O'Malley <[email protected]> Co-authored-by: Jason Power <[email protected]> * add workflow_dispatch Signed-off-by: Sally O'Malley <[email protected]> * bump chart * add helm test workflow Signed-off-by: Sally O'Malley <[email protected]> * update workflow Signed-off-by: Sally O'Malley <[email protected]> --------- Signed-off-by: Sally O'Malley <[email protected]> Co-authored-by: Jason Power <[email protected]>
- Loading branch information
Showing
21 changed files
with
1,058 additions
and
68 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -4,6 +4,5 @@ Chart.lock | |
| *.swp | ||
|
|
||
| keys-cert | ||
| *.pem | ||
| ./keys-cert/*.pem | ||
| **ADMIN** | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| [allowlist] | ||
| description = "Global Allowlist" | ||
|
|
||
| # Ignore based on any subset of the file path | ||
| paths = [ | ||
| # Ignore all example certs | ||
| '''\/testing-only-cert-key\/*\.pem$''', | ||
| ] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,49 @@ | ||
| # With this example, it is expected that there is a secret with the fulcio root & signing keys | ||
| # named 'fulcio-secret-rh' in namespace 'fulcio-system' and a secret 'rekor-private-key' | ||
| # with rekor signing keys in the 'rekor-system' namespace. | ||
| # secret names must match secret names in scaffold.tuf, that default to | ||
| # 'fulcio-secret-rh' and 'rekor-private-key' | ||
| # For root & key requirements, see ../requirements-keys-certs.md | ||
| # Note: User must substitute for localhost below. | ||
| --- | ||
| configs: | ||
| cosign: | ||
| appsSubdomain: localhost | ||
| fulcio: | ||
| create: false | ||
| rekor: | ||
| create: false | ||
|
|
||
| # github.com/sigstore/helm-charts/charts | ||
| scaffold: | ||
| fulcio: | ||
| clusterMonitoring: | ||
| enabled: false | ||
| server: | ||
| ingress: | ||
| http: | ||
| hosts: | ||
| - host: fulcio.localhost | ||
| path: / | ||
| config: | ||
| contents: | ||
| OIDCIssuers: | ||
| # https://<keycloak_instance>.<keycloak_ns>.<openshift_apps_subdomain>/auth/realms/sigstore | ||
| ? https://keycloak-keycloak-system.apps.open-svc-sts.k1wl.p1.openshiftapps.com/auth/realms/sigstore | ||
| : IssuerURL: https://keycloak-keycloak-system.apps.open-svc-sts.k1wl.p1.openshiftapps.com/auth/realms/sigstore | ||
| ClientID: sigstore | ||
| Type: email | ||
| rekor: | ||
| clusterMonitoring: | ||
| enabled: false | ||
| server: | ||
| ingress: | ||
| hosts: | ||
| - host: rekor.localhost | ||
| path: / | ||
| tuf: | ||
| ingress: | ||
| http: | ||
| hosts: | ||
| - host: tuf.localhost | ||
| path: / |
Oops, something went wrong.