Uploaded image for project: 'Cluster Integration and Delivery'
  1. Cluster Integration and Delivery
  2. CLID-26

As a user I want to enable signature verification for operators and additional Images in an air-gapped environment so that I can reliably deploy them with a high level of integrity/trust from the originator

XMLWordPrintable

    • Icon: Spike Spike
    • Resolution: Done
    • Icon: Normal Normal
    • None
    • None
    • oc-mirror
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • OCPSTRAT-1417 - oc-mirror automatically detects and mirror SigStore-style attachments
    • ---
    • ---
    • CLID Sprint 259, CLID Sprint 260
    • No

      Overview

      In a complex air-gapped environment, currently we have the ability to enable release signature verification.

      This spike is to investigate how we could enable signature verification for operators and additional Images.

      The high level OCPSTRAT-1417 should also be taken into consideration as this impacts the way forward for all image signatures and signature verification.

       

      Goal

      A design or similar type document of what is needed to implement signature  verification in a complex air-gapped environment.

      Analyze the impact of OCPSTRAT-1417.

      In the event of "not possible to do" , the process and reasons should also be documented.

              luzuccar@redhat.com Luigi Mario Zuccarelli
              luzuccar@redhat.com Luigi Mario Zuccarelli
              Votes:
              4 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: