scaffolding
scaffolding copied to clipboard
sigstore
Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
#### Summary Make the sigstore terraform module more versatile for different types of deployments, especially development/proof of concept/testing deployments. Makes the following changes: ##### Make TUF bucket member configurable In...
**Description** The redis and mysql modules each manage a `google_compute_global_address` resource with name `-priv-ip`: https://github.com/sigstore/scaffolding/blob/0621d5066ef1019615d922bf2e886f97fb93b7aa/terraform/gcp/modules/mysql/mysql.tf#L40 https://github.com/sigstore/scaffolding/blob/0621d5066ef1019615d922bf2e886f97fb93b7aa/terraform/gcp/modules/redis/main.tf#L35 If the modules are being applied as part of the umbrella sigstore module, then...
Bumps the terraform group in /terraform/gcp/modules/sigstore with 1 update: [hashicorp/google](https://github.com/hashicorp/terraform-provider-google). Updates `hashicorp/google` from 5.24.0 to 5.27.0 Release notes Sourced from hashicorp/google's releases. v5.27.0 FEATURES: New Data Source: google_storage_bucket_objects (#17920) New...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.29.3 to 0.30.0. Commits fb932d2 Update dependencies to v0.30.0 tag d014286 Merge remote-tracking branch 'origin/master' into release-1.30 581c1b8 Update x/net for CVE-2023-45288 35ca1f4 Merge pull request #123932...
Bumps the terraform group in /terraform/gcp/modules/monitoring/slo with 1 update: [hashicorp/google](https://github.com/hashicorp/terraform-provider-google). Updates `hashicorp/google` from 5.24.0 to 5.27.0 Release notes Sourced from hashicorp/google's releases. v5.27.0 FEATURES: New Data Source: google_storage_bucket_objects (#17920) New...
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.29.3 to 0.30.0. Commits 37988e5 Merge remote-tracking branch 'origin/master' into release-1.30 c857a38 Update x/net for CVE-2023-45288 0407311 followup to allow special characters 25164f7 Merge pull request #123435...
Bumps [k8s.io/code-generator](https://github.com/kubernetes/code-generator) from 0.29.3 to 0.30.0. Commits fee00da Update dependencies to v0.30.0 tag e1372fd Merge remote-tracking branch 'origin/master' into release-1.30 b8aa536 Update x/net for CVE-2023-45288 7142117 Merge pull request #123735...
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.29.3 to 0.30.0. Commits 3aa4577 Update dependencies to v0.30.0 tag 2df4de1 Merge remote-tracking branch 'origin/master' into release-1.30 ade2ae2 Update x/net for CVE-2023-45288 b4632b7 Merge pull request #123932...
**Description** _Copied from https://sigstore.slack.com/archives/C049ALX6Q83/p1709072587850229_ tl;dr - Sigstore TUF metadata has evolved, but Cosign and Scaffolding are lagging behind. We need to start ingesting the new format so we can fully...
**Description** I am not sure if this is a bug or a documentation problem. I'm leaving this here as I imagine that anyone deploying these days probably has the same...
