For this exercise, Harbor was used as container registry. It was deployed in a ubuntu 20.04 VM after generate ssl certificates with certbot. The harbor.yml file with the values for the deployments is at harbor folder.
The folder connaisseur contains the helm chart for the connaisseur instance that is with the namespaced validation running in validate mode
The folder connaisseurd contains the helm chart for the connaisseur instance that is with the detection mode.
To let both work together, I changed the app.name in the chart.yaml of connaisseurd, to fix colisions in roles
To deploy the instances:
helm install connaisseur helm --atomic --create-namespace --namespace connaisseur
helm install connaisseurd helm --atomic --create-namespace --namespace connaisseurd
To test the image deployment on the cluster, go through actions, and run the workflow run-images.
To run the github action workflow manually outside the repo, use this curl
curl -X POST -H "Accept: application/vnd.github.v3+json" -H "Authorization: token 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" https://api.github.com/repos/albertovmware/test-sign/actions/workflows/28611041/dispatches -d '{"ref":"main""}}'