8000 GitHub - albert0dd/test-sign
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

albert0dd/test-sign

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

20 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Image signing and verification for kubernetes clusters

For this exercise, Harbor was used as container registry. It was deployed in a ubuntu 20.04 VM after generate ssl certificates with certbot. The harbor.yml file with the values for the deployments is at harbor folder.

The folder connaisseur contains the helm chart for the connaisseur instance that is with the namespaced validation running in validate mode

The folder connaisseurd contains the helm chart for the connaisseur instance that is with the detection mode.

To let both work together, I changed the app.name in the chart.yaml of connaisseurd, to fix colisions in roles

To deploy the instances:

helm install connaisseur helm --atomic --create-namespace --namespace connaisseur
helm install connaisseurd helm --atomic --create-namespace --namespace connaisseurd

To test the image deployment on the cluster, go through actions, and run the workflow run-images.

To run the github action workflow manually outside the repo, use this curl

curl -X POST -H "Accept: application/vnd.github.v3+json" -H "Authorization: token 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" https://api.github.com/repos/albertovmware/test-sign/actions/workflows/28611041/dispatches -d '{"ref":"main""}}'

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published
0