Remove cosign stuff. It's not working and I can figure this out later.

This commit is contained in:
jimmy committed 2023-04-20 18:13:34 -04:00
1 parent 667cf3b8ff
commit 069149c8b3
3 files changed
+25 -20

No files matched your search

+2 -17
View File
@@ -18,7 +18,6 @@ spec:
description: Name of the secret containing the credentials to push to the registry.
workspaces:
- name: source
- name: cosign-credentials
steps:
- name: build
image: harbor.internal.jpace121.net/k8s/buildah:latest
@@ -27,28 +26,14 @@ spec:
set -x
# Login
buildah login --tls-verify=false --username=$USERNAME --password=$PASSWORD $(params.registry)
mkdir ~/.sigstore
cp $(workspaces.cosign-credentials.path)/* ~/.sigstore
cat <<EOF > ~/.sigstore/param-file.yaml
privateKeyFile: "$HOME/.sigstore/cosign.key"
privateKeyPassphraseFile: "$HOME/.sigstore/cosign.password"
EOF
mkdir -p /etc/containers/registries.d/
cat <<EOF > /etc/containers/registries.d/james-registry.yaml
docker:
$(params.registry):
use-sigstore-attachments: true
EOF
# Build
buildah --storage-driver=overlay bud --tls-verify=false --no-cache \
-f $(params.containerfile) -t $(params.name):$(params.version) .
# Push
cat $HOME/.sigstore/param-file.yaml
ls $HOME/.sigstore
skopeo copy --debug --dest-tls-verify=false --sign-by-sigstore=$HOME/.sigstore/param-file.yaml \
skopeo copy --debug --dest-tls-verify=false \
containers-storage:localhost/$(params.name):$(params.version) \
docker://$(params.registry)/$(params.name):$(params.version)
skopeo copy --debug --dest-tls-verify=false --sign-by-sigstore=$HOME/.sigstore/param-file.yaml \
skopeo copy --debug --dest-tls-verify=false \
containers-storage:localhost/$(params.name):$(params.version) \
docker://$(params.registry)/$(params.name):latest
env: