UNCLASSIFIED - NO CUI

Skip to content

WIP: adding updates for arguments to upload-to-harbor.sh in harbor.yaml, updated...

Tim Seagren requested to merge 53-notary-tim into development

adding updates for arguments to upload-to-harbor.sh in harbor.yaml, updated upload-to-harbor.sh with workflow for notary image signing, added local-delegation.sh script to scripts/ dir for inital key creation and snapshot rotation.

New required CI variables:

  • NOTARY_URL
  • NOTARY_SIGNER_AUTH
  • NOTARY_ROOT_PASSWORD
  • NOTARY_DELEGATION_PASSWORD
  • NOTARY_TARGETS_PASSWORD
  • NOTARY_SNAPSHOT_PASSWORD
  • NOTARY_DELEGATION_KEY

Yes, PASSWORD on those, not PASSPHRASE. Someone will tell me I'm wrong for that and the CI variables can be named according to how Notary uses them directly, but I wasn't sure...

scripts/local-delegation.sh has NOT been run yet, none of this is tested as a result.

Definitely need @blake.burkhart @david.freeman @gavin.scallon @ariel.shnitzer eyes on this.

Related to #53 (closed)

Edited by Tim Seagren

Merge request reports