From edec714c4cd50219c4517dd647d9cba9c3064161 Mon Sep 17 00:00:00 2001 From: Cansu Kavili Date: Tue, 30 Apr 2024 12:26:31 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=8C=BFOCP=20login=20for=20cosign=20added?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../8-image-signing.md | 7 +++++++ docs/3-revenge-of-the-automated-testing/9-sbom.md | 9 +++++++++ 2 files changed, 16 insertions(+) diff --git a/docs/3-revenge-of-the-automated-testing/8-image-signing.md b/docs/3-revenge-of-the-automated-testing/8-image-signing.md index 9977c99e..c91a5505 100644 --- a/docs/3-revenge-of-the-automated-testing/8-image-signing.md +++ b/docs/3-revenge-of-the-automated-testing/8-image-signing.md @@ -31,6 +31,13 @@ 🐌 THIS IS NOT GITOPS - The generated private key is stored in a Kubernetes secret in you -ci-cd project. We'll leave it as an exercise to the reader to extract and store this as a SealedSecret instead! 🐎

+

+ 😱 If `cosign` command returns error, that means you logged out of the cluster so please run the below command and then run the cosign command again. +

+ + ```bash + oc login --server=https://api.${CLUSTER_DOMAIN##apps.}:6443 -u -p + ``` Now let's proceed to extend the pipelines with image signing step. diff --git a/docs/3-revenge-of-the-automated-testing/9-sbom.md b/docs/3-revenge-of-the-automated-testing/9-sbom.md index f5107222..cc932137 100644 --- a/docs/3-revenge-of-the-automated-testing/9-sbom.md +++ b/docs/3-revenge-of-the-automated-testing/9-sbom.md @@ -40,6 +40,15 @@ In this exercise, we'll use [Syft](https://github.com/anchore/syft) to generate 🐌 THIS IS NOT GITOPS - The generated private key is stored in a Kubernetes secret in you -ci-cd project. We'll leave it as an exercise to the reader to extract and store this as a SealedSecret instead! 🐎

+

+ 😱 If `cosign` command returns error, that means you logged out of the cluster so please run the below command and then run the cosign command again. +

+ + ```bash + oc login --server=https://api.${CLUSTER_DOMAIN##apps.}:6443 -u -p + ``` + + 2. Let's try and see what is an SBOM: ```bash