Skip to content

Commit

Permalink
Merge pull request #287 from ckavili/main
Browse files Browse the repository at this point in the history
🌿OCP login for cosign added🌿
  • Loading branch information
springdo authored Apr 30, 2024
2 parents 9d0c32f + edec714 commit d7cb831
Show file tree
Hide file tree
Showing 2 changed files with 16 additions and 0 deletions.
7 changes: 7 additions & 0 deletions docs/3-revenge-of-the-automated-testing/8-image-signing.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,13 @@
🐌 THIS IS NOT GITOPS - The generated private key is stored in a Kubernetes secret in you <TEAM_NAME>-ci-cd project. We'll leave it as an exercise to the reader to extract and store this as a SealedSecret instead! 🐎
</p>
<p class="tip">
😱 If `cosign` command returns error, that means you logged out of the cluster so please run the below command and then run the cosign command again.
</p>
```bash
oc login --server=https://api.${CLUSTER_DOMAIN##apps.}:6443 -u <USER_NAME> -p <PASSWORD>
```
Now let's proceed to extend the pipelines with image signing step.

Expand Down
9 changes: 9 additions & 0 deletions docs/3-revenge-of-the-automated-testing/9-sbom.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,15 @@ In this exercise, we'll use [Syft](https://github.com/anchore/syft) to generate
🐌 THIS IS NOT GITOPS - The generated private key is stored in a Kubernetes secret in you <TEAM_NAME>-ci-cd project. We'll leave it as an exercise to the reader to extract and store this as a SealedSecret instead! 🐎
</p>
<p class="tip">
😱 If `cosign` command returns error, that means you logged out of the cluster so please run the below command and then run the cosign command again.
</p>
```bash
oc login --server=https://api.${CLUSTER_DOMAIN##apps.}:6443 -u <USER_NAME> -p <PASSWORD>
```
2. Let's try and see what is an SBOM:

```bash
Expand Down

0 comments on commit d7cb831

Please sign in to comment.