WIP: adding updates for arguments to upload-to-harbor.sh in harbor.yaml, updated...
adding updates for arguments to upload-to-harbor.sh in harbor.yaml, updated upload-to-harbor.sh with workflow for notary image signing, added local-delegation.sh script to scripts/ dir for inital key creation and snapshot rotation.
New required CI variables:
-
NOTARY_URL -
NOTARY_SIGNER_AUTH -
NOTARY_ROOT_PASSWORD -
NOTARY_DELEGATION_PASSWORD -
NOTARY_TARGETS_PASSWORD -
NOTARY_SNAPSHOT_PASSWORD -
NOTARY_DELEGATION_KEY
Yes, PASSWORD on those, not PASSPHRASE. Someone will tell me I'm wrong for that and the CI variables can be named according to how Notary uses them directly, but I wasn't sure...
scripts/local-delegation.sh has NOT been run yet, none of this is tested as a result.
Definitely need @blake.burkhart @david.freeman @gavin.scallon @ariel.shnitzer eyes on this.
Related to #53 (closed)
Edited by Tim Seagren