Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[TEP-0089] Add a config map to support SPIRE initialization.
This PR is one among the set of PRs done to implement TEP-0089. This PR has been derived from the larger PRs PR#5715 and PR#4759 by @pxp928 and @lumjjb. This PR is addressing the problem of non-falisfiable provenance discussed in TEP-0089. SPIRE is a tool which provides cryptographic identities to workloads in a cluster. These identities are also associated with a key pair, which can be used to sign TaskRun results to track if they have been modified by other workloads. Using SPIRE is one of the ways to address non-falsifiable provenance. This PR has the following changes 1. Modify the feature flag to control non-falsifiability from enable-spire to enforce-nonfalsifiability="spire". This is in accordance to the approved TEP. 2. Add a configmap config-spire to initialize SPIRE. Signed-off-by: jagathprakash <31057312+jagathprakash@users.noreply.github.com>
- Loading branch information