Add minisign e2e tests.

Set a default CORS policy.

These require the minisign binary to be installed.

This should fix the rest of the errors.

fix http/https for swagger UI

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

Add x509 support and tests.

Setup let's encrypt and cert manager.

This all comes up! Some TODOs still in the yaml. A basic README explaining how I set it up.

Add some more e2e tests to make sure we exercise all the CLI commands:

saves second pass over data

- Run through the get flow, make sure the output is well structured
- Call loginfo, make sure there are no errors.

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

Still need to add some more e2e-style tests that go through the ArtifactFactory flow.

Add a helper to wrap Cobbra functions to make them easier to test.

Add a flag for signature format.

This supports pgp and minisign right now. We can add logic to try to detect these later.

Update generated files.

My swagger build introduced these, they're whitespace only but could
make larger PRs harder to review.

This switches out cobra commands to return obj, err. This should make it
easier to test them, and also keep formatting across the commands consistent.

Formatting should happen in one place, instead of having each command print directly.

Add an e2e test that uses verify.

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

* add endpoint for public key and return signed tree head with loginfo

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

Introduce swagger UI server

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

Co-authored-by: Bob Callaway <bcallawa@redhat.com>

* Add support for ed25519/signify/minisign keys and signatures

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

also adds --log-index parameter to CLI verify command

Signed-off-by: Bob Callaway <bcallawa@redhat.com>

Change the e2e tests to generate new, random data.

This way we don't have to worry about existing entries in the logs.

Rewrite the e2e tests in go from bash.

Merge OpenAPI back into main

Add a second test to make sure duplicates are detected.