- 
    
Epic
 - 
    Resolution: Unresolved
 - 
    
Normal
 - 
    None
 - 
    None
 - 
    None
 
- 
        Add support for external key providers
 - 
        None
 - 
        67% To Do, 0% In Progress, 33% Done
 - 
        False
 - 
        
 - 
        False
 - 
        Not Selected
 - 
        None
 
- 
        None
 - 
        None
 
OCP/Telco Definition of Done
Epic Template descriptions and documentation.
<--- Cut-n-Paste the entire contents of this description into your new Epic --->
Epic Goal
- Add support for external key providers like Vault/KMS
 
Why is this important?
- Customers can use KMS/Vault for storing certs used in image signing.
 
Scenarios
- Customer wants to store certs used in image signing and take advantage of features like cert rotation provided by those key providers.
 
Acceptance Criteria
- CI - MUST be running successfully with tests automated
 - Release Technical Enablement - Provide necessary release enablement details and documents.
 - Fetch required certs from Vault/KMS and use them for image verification.
 
Dependencies (internal and external)
- ...
 
Previous Work (Optional):
- …
 
Open questions::
- …
 
Done Checklist
- CI - CI is running, tests are automated and merged.
 - Release Enablement <link to Feature Enablement Presentation>
 - DEV - Upstream code and tests merged: <link to meaningful PR or GitHub Issue>
 - DEV - Upstream documentation merged: <link to meaningful PR or GitHub Issue>
 - DEV - Downstream build attached to advisory: <link to errata>
 - QE - Test plans in Polarion: <link or reference to Polarion>
 - QE - Automated tests merged: <link or reference to automated tests>
 - DOC - Downstream documentation merged: <link to meaningful PR>
 
- relates to
 - 
                    
OCPNODE-2269 Dev Preview Support BYOPKI for image verification in OCP
-         
 - Release Pending
 
 -         
 - 
                    
OCPSTRAT-1782 OpenShift integration with external secret managers (Vault)
-         
 - In Progress
 
 -