Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add option to use preinstalled URLs #41

Merged
merged 1 commit into from
Feb 13, 2025
Merged

Add option to use preinstalled URLs #41

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
35 changes: 29 additions & 6 deletions tas-env-variables.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,34 @@
#!/bin/bash

if [ -z "$OIDC_ISSUER_URL" ]; then
export OIDC_ISSUER_URL=https://$(oc get route keycloak -n keycloak-system | tail -n 1 | awk '{print $2}')/auth/realms/trusted-artifact-signer
fi

if [ -z "$TUF_URL" ]; then
export TUF_URL=$(oc get tuf -o jsonpath='{.items[0].status.url}')
fi

if [ -z "$FULCIO_URL" ]; then
export COSIGN_FULCIO_URL=$(oc get fulcio -o jsonpath='{.items[0].status.url}')
else
export COSIGN_FULCIO_URL=$FULCIO_URL
fi

if [ -z "$REKOR_URL" ]; then
export COSIGN_REKOR_URL=$(oc get rekor -o jsonpath='{.items[0].status.url}')
else
export COSIGN_REKOR_URL=$REKOR_URL
fi

if [ -z "$REKOR_UI_URL" ]; then
export REKOR_UI_URL=$(oc get rekor -o jsonpath='{.items[0].status.rekorSearchUIUrl}')
fi

if [ -z "$TSA_URL" ]; then
export TSA_URL=$(oc get timestampauthorities -o jsonpath='{.items[0].status.url}')/api/v1/timestamp
fi

# Export the environment variables for the current session
export TUF_URL=$(oc get tuf -o jsonpath='{.items[0].status.url}')
export OIDC_ISSUER_URL=https://$(oc get route keycloak -n keycloak-system | tail -n 1 | awk '{print $2}')/auth/realms/trusted-artifact-signer
export COSIGN_FULCIO_URL=$(oc get fulcio -o jsonpath='{.items[0].status.url}')
export COSIGN_REKOR_URL=$(oc get rekor -o jsonpath='{.items[0].status.url}')
export COSIGN_MIRROR=$TUF_URL
export COSIGN_ROOT=$TUF_URL/root.json
export COSIGN_OIDC_CLIENT_ID="trusted-artifact-signer"
Expand All @@ -15,8 +40,6 @@ export SIGSTORE_OIDC_ISSUER=$COSIGN_OIDC_ISSUER
export SIGSTORE_REKOR_URL=$COSIGN_REKOR_URL
export REKOR_REKOR_SERVER=$COSIGN_REKOR_URL
export SIGSTORE_OIDC_CLIENT_ID=trusted-artifact-signer
export TSA_URL=$(oc get timestampauthorities -o jsonpath='{.items[0].status.url}')/api/v1/timestamp
export REKOR_UI_URL=$(oc get rekor -o jsonpath='{.items[0].status.rekorSearchUIUrl}')
export SIGSTORE_REKOR_UI_URL=$REKOR_UI_URL

# Print the environment variables to verify they are set
Expand Down
3 changes: 2 additions & 1 deletion test/cosign/cosign_sign_verify_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,8 @@ var _ = Describe("Cosign test", Ordered, func() {

Expect(dockerCli.ImageTag(testsupport.TestContext, testImage, targetImageName)).To(Succeed())
var push io.ReadCloser
push, err = dockerCli.ImagePush(testsupport.TestContext, targetImageName, image.PushOptions{})
// use empty auth to avoid "invalid X-Registry-Auth header: EOF" (https://github.com/moby/moby/issues/10983
push, err = dockerCli.ImagePush(testsupport.TestContext, targetImageName, image.PushOptions{RegistryAuth: base64.StdEncoding.EncodeToString([]byte("{}"))})
Expect(err).ToNot(HaveOccurred())
_, err = io.Copy(os.Stdout, push)
Expect(err).ToNot(HaveOccurred())
Expand Down
3 changes: 2 additions & 1 deletion test/cosign/cosign_sign_verify_tsa_test.go
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
package cosign

import (
"encoding/base64"
"io"
"net/http"
"os"
Expand Down Expand Up @@ -67,7 +68,7 @@ var _ = Describe("TSA test", Ordered, func() {

Expect(dockerCli.ImageTag(testsupport.TestContext, tsaTestImage, tsaTargetImageName)).To(Succeed())
var push io.ReadCloser
push, err = dockerCli.ImagePush(testsupport.TestContext, tsaTargetImageName, image.PushOptions{})
push, err = dockerCli.ImagePush(testsupport.TestContext, tsaTargetImageName, image.PushOptions{RegistryAuth: base64.StdEncoding.EncodeToString([]byte("{}"))})
Expect(err).ToNot(HaveOccurred())
_, err = io.Copy(os.Stdout, push)
Expect(err).ToNot(HaveOccurred())
Expand Down
Loading