From 710784c49e106931766456e83949d64ba4eaa911 Mon Sep 17 00:00:00 2001
From: asraa <asraa@google.com>
Date: Wed, 23 Jun 2021 16:05:02 -0400
Subject: [PATCH] Add timestamping cert chain to config (#338)
Signed-off-by: Asra Ali <asraa@google.com>
---
config/rekor.yaml | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/config/rekor.yaml b/config/rekor.yaml
index 664341a..ed70036 100644
--- a/config/rekor.yaml
+++ b/config/rekor.yaml
@@ -50,7 +50,8 @@ spec:
"--log_type=prod",
"--rekor_server.signer=$(KMS)",
"--enable_attestation_storage=$(ENABLE_ATTESTATION_STORAGE)",
- "--attestation_storage_bucket=$(ATTESTATION_BUCKET)"
+ "--attestation_storage_bucket=$(ATTESTATION_BUCKET)",
+ "--rekor_server.timestamp_chain=$(TIMESTAMP_CHAIN)"
]
env:
- name: KMS
@@ -68,6 +69,11 @@ spec:
configMapKeyRef:
name: rekor-config
key: attestation_bucket
+ - name: TIMESTAMP_CHAIN
+ valueFrom:
+ configMapKeyRef:
+ name: rekor-config
+ key: timestamp_chain
resources:
requests:
memory: "1G"
--
GitLab