Merge commit 'fe564d72279f4ab061b961dd528623f0ed272667' as 'cluster-config'

2025-03-30 15:46:16 -05:00
commit d76d8f8e05
@@ -0,0 +1,5 @@
+namespace: trusted-artifact-signer
+
+resources:
+- namespace.yaml
+- securesign.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  annotations:
+    openshift.io/display-name: Red Hat Trusted Artifact Signer
+  name: trusted-artifact-signer
@@ -0,0 +1,57 @@
+apiVersion: rhtas.redhat.com/v1alpha1
+kind: Securesign
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+    argocd.argoproj.io/sync-wave: "10"
+  labels:
+    app.kubernetes.io/instance: securesign
+    app.kubernetes.io/name: securesign
+    app.kubernetes.io/part-of: trusted-artifact-signer
+  name: securesign
+  namespace: trusted-artifact-signer
+spec:
+  fulcio:
+    certificate:
+      commonName: fulcio.hostname
+      organizationEmail: jdoe@redhat.com
+      organizationName: Red Hat
+    config:
+      OIDCIssuers:
+      - ClientID: trusted-artifact-signer
+        Issuer: <replaceme>
+        IssuerURL: <replaceme>
+        Type: email
+    externalAccess:
+      enabled: true
+    monitoring:
+      enabled: false
+  rekor:
+    backFillRedis:
+      enabled: true
+      schedule: 0 0 * * *
+    externalAccess:
+      enabled: true
+    monitoring:
+      enabled: false
+    pvc:
+      retain: true
+      size: 5Gi
+    rekorSearchUI:
+      enabled: true
+    signer:
+      kms: secret
+  trillian:
+    database:
+      create: true
+      pvc:
+        retain: true
+        size: 5Gi
+  tuf:
+    externalAccess:
+      enabled: true
+    keys:
+    - name: rekor.pub
+    - name: ctfe.pub
+    - name: fulcio_v1.crt.pem
+    port: 80
@@ -0,0 +1,6 @@
+namespace: rhtas-operator
+
+resources:
+- namespace.yaml
+- operator-group.yaml
+- subscription.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  annotations:
+    openshift.io/display-name: Red Hat Trusted Artifact Signer
+  name: rhtas-operator
@@ -0,0 +1,6 @@
+apiVersion: operators.coreos.com/v1
+kind: OperatorGroup
+metadata:
+  name: rhtas-operator
+spec:
+  upgradeStrategy: Default
@@ -0,0 +1,18 @@
+apiVersion: operators.coreos.com/v1alpha1
+kind: Subscription
+metadata:
+  name: rhtas-operator
+spec:
+  config:
+    resources:
+      limits:
+        cpu: 500m
+        memory: 512Mi
+      requests:
+        cpu: 5m
+        memory: 128Mi
+  channel: stable-v1.1
+  installPlanApproval: Automatic
+  name: rhtas-operator
+  source: redhat-operators
+  sourceNamespace: openshift-marketplace