sigstore-ocp

KO | EN

gitlite — search

#python #java #python3 #arduino #golang #machine-learning #rust #html #flask #javascript #seismology #nodejs

★ 12 Open GitHub ↗

sigstore helm-charts and build scripts opinionated for running on OCP and RHEL

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Sigstore Helm Chart for OpenShift

**This chart offers an opinionated OpenShift-specific experience.** It is based on and directly depends on an upstream canonical [Sigstore Scaffold Helm chart](https://github.com/sigstore/helm-charts/tree/main/charts/scaffold). For less opinionated experience, consider using the upstream chart directly.

This chart extends all the features in the upstream chart in addition to including OpenShift only features. It is not recommended to use this chart on other platforms.

## Usage

### Installing from the Chart Repository

For a quickstart on how to install Sigstore components on OpenShift refer to the
[quickstart quide](docs/quick-start-with-keycloak.md)

## Scaffolding Chart

More information can be found by inspecting the [trusted-artifact-signer chart](charts/trusted-artifact-signer).

## Contributing

Install the [pre-commit](https://pre-commit.com/) package and run `pre-commit run --all-files` before pushing changes, or `pre-commit install` to automatically run the pre-commit hooks with every `git commit`. If it fails,
run the `git commit` command again. It's likely the pre-commit hook fixed the issue and you have to bring in the new changes.

### Pull Requests

Testing this repository requires access to `registry.redhat.io` images. Because of this the tests depend on GitHub
secrets. GitHub secrets are not accessible to forked repositories, so the normal workflow of submitting a PR from your
fork against `github.com/securesign/sigstore-ocp` main branch is not possible when making changes to either the `charts`
or `.github` directories. These directories require a run of the test suite that requires access to `registry.redhat.io`.
PRs are welcome in this repository, however. Please reach out to one of the [OWNERS](./OWNERS) to submit a PR to
`charts` or `.github`.

### Testing

To set up a `kind` cluster and deploy the charts, run the following from the root of this repository

```bash
./kind/kind-up-test.sh
```

This script will setup new KinD cluster for you, deploy the sigstore and execute tests on the deployment.
There are no ingress routes so the sigstore is accessible only from the container. (see https://github.com/securesign/sigstore-ocp/blob/main/sign-verify.md#signing-a-container-using-the-cosign-pod)

To uninstall helm chart:

```bash
helm uninstall trusted-artifact-signer -n sigstore
```

To cleanup the test kind cluster, run:

```bash
kind delete cluster
```

sigstore-ocp

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README