Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ability to install specific versions of Fulcio, Rekor, etc. #462

Open
vaikas opened this issue Nov 7, 2022 · 1 comment
Open

Add ability to install specific versions of Fulcio, Rekor, etc. #462

vaikas opened this issue Nov 7, 2022 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@vaikas
Copy link
Contributor

vaikas commented Nov 7, 2022

Description

It would be nice to be able to specify which release version of the components should be stood up, for example:
sigstore/cosign#2402 (comment)

It would be nice to be able to specify which (for example, Rekor), say 1.0.0 or 1.0.x that should get installed. Couple of things off the top of my head is to grab the releases from GitHub and then parse, like is done here (so supports, latest, 1.0.0, and 1.0.x:
https:/chainguard-dev/actions/blob/main/setup-knative/action.yaml#L82

So, that's cool, it gives us the version for the release we're looking for, but then we need to go through and actually pull out the released container image. I'm not sure where else this is kept right now except in things like:
https:/sigstore/rekor/releases/download/v1.0.0/rekor-v1.0.0.yaml

where we'd then pull the image from. Is there a release artifact that we would have the container image we could get in an easier manner?
@cpanato thoughts?

And lastly, once we get the container image, we'd need to kustomize (or something else) and replace the various ./config files with the correct container images. Like here:
https:/sigstore/scaffolding/blob/main/config/rekor/rekor/300-rekor.yaml#L22

@vaikas vaikas added the enhancement New feature or request label Nov 7, 2022
@cpanato
Copy link
Member

cpanato commented Nov 16, 2022

i like the idea, will be good as well to test different combinations.

Lets start working on this :)

@cpanato cpanato self-assigned this Nov 16, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants