Updated ctlog config to include CodeSigning usage.

This mirrors the change from sigstore/fulcio#472 Signed-off-by: Kenny Leung <kleung@chainguard.dev>
k4leung4 · Apr 20, 2022 · bbe2a3d · bbe2a3d
1 parent 88498ed
commit bbe2a3d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/.github/workflows/fulcio-rekor-kind.yaml b/.github/workflows/fulcio-rekor-kind.yaml
@@ -130,7 +130,7 @@ jobs:
         done
 
         # Now wait for all of the rollouts to complete!
-        for ns in fulcio-system trillian-system rekor-system ctlog-system; do
+        for ns in trillian-system rekor-system fulcio-system ctlog-system; do
           kubectl wait --timeout 10m -n ${ns} --for=condition=Ready pod --all
         done
 

diff --git a/cmd/ctlog/createctconfig/main.go b/cmd/ctlog/createctconfig/main.go
@@ -129,6 +129,7 @@ func main() {
 			PrivateKey:     privKeyProto,
 			PublicKey:      &keyspb.PublicKey{Der: keyDER},
 			LogBackendName: "trillian",
+			ExtKeyUsages:   []string{"CodeSigning"},
 		}
 
 		multiConfig := configpb.LogMultiConfig{