-
Notifications
You must be signed in to change notification settings - Fork 19
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
bring tas-env-generate script into single source of truth (#182)
- Loading branch information
1 parent
8997844
commit 8144042
Showing
3 changed files
with
26 additions
and
38 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -3,7 +3,6 @@ Chart.lock | |
# Vim swap files | ||
*.swp | ||
|
||
*tas-env-variables* | ||
keys-cert | ||
./keys-cert/*.pem | ||
**/clustercert/** | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,25 @@ | ||
#!/bin/bash | ||
|
||
export BASE_HOSTNAME=apps.$(oc get dns cluster -o jsonpath='{ .spec.baseDomain }') | ||
echo "base hostname = $BASE_HOSTNAME" | ||
|
||
|
||
export KEYCLOAK_REALM=sigstore | ||
export KEYCLOAK_URL=https://keycloak-keycloak-system.$BASE_HOSTNAME | ||
export TUF_URL=https://tuf.$BASE_HOSTNAME | ||
export COSIGN_FULCIO_URL=https://fulcio.$BASE_HOSTNAME | ||
export COSIGN_REKOR_URL=https://rekor.$BASE_HOSTNAME | ||
export COSIGN_MIRROR=$TUF_URL | ||
export COSIGN_ROOT=$TUF_URL/root.json | ||
export COSIGN_OIDC_ISSUER=$KEYCLOAK_URL/auth/realms/$KEYCLOAK_REALM | ||
export COSIGN_CERTIFICATE_OIDC_ISSUER=$COSIGN_OIDC_ISSUER | ||
export COSIGN_YES="true" | ||
|
||
# Gitsign/Sigstore Variables | ||
export SIGSTORE_FULCIO_URL=$COSIGN_FULCIO_URL | ||
export SIGSTORE_OIDC_ISSUER=$COSIGN_OIDC_ISSUER | ||
export SIGSTORE_REKOR_URL=$COSIGN_REKOR_URL | ||
|
||
# Rekor CLI Variables | ||
export REKOR_REKOR_SERVER=$COSIGN_REKOR_URL | ||
|