Uploaded image for project: 'Cluster Integration and Delivery'
  1. Cluster Integration and Delivery
  2. CLID-347

Create defaults configs for signature mirroring/verification

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Normal Normal
    • openshift-4.19
    • None
    • oc-mirror
    • Product / Portfolio Work
    • False
    • Hide

      None

      Show
      None
    • False
    • None
    • None
    • CLID Sprint 268, CLID Sprint 269

      In operating systems (OS) where the registries.d and policy.json does not include our internal registries and the field use-sigstore-attachment: true, it is necessary to have a default embedded in oc-mirror.

      For oc-mirror cache:

      docker:
     localhost:55000:
         use-sigstore-attachments: true

      For customer regitry (only an example of a registry running on localhost:6000 below)

      docker:
     localhost:6000:
         use-sigstore-attachments: true

      For the release images:

      docker:
     quay.io:
         use-sigstore-attachments: true

      For operator catalog and bundles:

      docker:
     registry.access.redhat.com:
         use-sigstore-attachments: true
         lookaside: https://access.redhat.com/webassets/docker/content/sigstore
      docker:
     registry.redhat.io:
         use-sigstore-attachments: true
         lookaside: https://registry.redhat.io/containers/sigstore

      Reference about containers/image policy.json/registries.d:

      https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md
      https://github.com/containers/image/blob/main/docs/containers-registries.conf.d.5.md

          There are no Sub-Tasks for this issue.

              skhoury@redhat.com Sherine Khoury
              rh-ee-aguidi Alex Guidi
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: