Merge commit 'fe564d72279f4ab061b961dd528623f0ed272667' as 'cluster-config'

cluster-config/components/rhtas-operator/instance/base/kustomization.yaml

@@ -0,0 +1,5 @@
+namespace: trusted-artifact-signer
+
+resources:
+- namespace.yaml
+- securesign.yaml

cluster-config/components/rhtas-operator/instance/base/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  annotations:
+    openshift.io/display-name: Red Hat Trusted Artifact Signer
+  name: trusted-artifact-signer

cluster-config/components/rhtas-operator/instance/base/securesign.yaml

@@ -0,0 +1,57 @@
+apiVersion: rhtas.redhat.com/v1alpha1
+kind: Securesign
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+    argocd.argoproj.io/sync-wave: "10"
+  labels:
+    app.kubernetes.io/instance: securesign
+    app.kubernetes.io/name: securesign
+    app.kubernetes.io/part-of: trusted-artifact-signer
+  name: securesign
+  namespace: trusted-artifact-signer
+spec:
+  fulcio:
+    certificate:
+      commonName: fulcio.hostname
+      organizationEmail: jdoe@redhat.com
+      organizationName: Red Hat
+    config:
+      OIDCIssuers:
+      - ClientID: trusted-artifact-signer
+        Issuer: <replaceme>
+        IssuerURL: <replaceme>
+        Type: email
+    externalAccess:
+      enabled: true
+    monitoring:
+      enabled: false
+  rekor:
+    backFillRedis:
+      enabled: true
+      schedule: 0 0 * * *
+    externalAccess:
+      enabled: true
+    monitoring:
+      enabled: false
+    pvc:
+      retain: true
+      size: 5Gi
+    rekorSearchUI:
+      enabled: true
+    signer:
+      kms: secret
+  trillian:
+    database:
+      create: true
+      pvc:
+        retain: true
+        size: 5Gi
+  tuf:
+    externalAccess:
+      enabled: true
+    keys:
+    - name: rekor.pub
+    - name: ctfe.pub
+    - name: fulcio_v1.crt.pem
+    port: 80