Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support Cosign Image signature verification with KMS #360

Draft
wants to merge 5 commits into
base: main
Choose a base branch
from
Draft

Support Cosign Image signature verification with KMS #360

wants to merge 5 commits into from

Commits on Dec 15, 2023

  1. cdh/kms: add PubkeyProvider API for KMS 

    Also impl PubkeyProvider for KBS

Signed-off-by: Xynnn007 <[email protected]>
    @Xynnn007
    Xynnn007 committed Dec 15, 2023
    Configuration menu
    Copy the full SHA
    4bc8c2a View commit details
    Browse the repository at this point in the history

  2. cdh/hub: add get_public_key api for hub 

    Signed-off-by: Xynnn007 <[email protected]>
    @Xynnn007
    Xynnn007 committed Dec 15, 2023
    Configuration menu
    Copy the full SHA
    8bc0922 View commit details
    Browse the repository at this point in the history

  3. cdh/bin: add GetPublicKey ttrpc service api 

    Signed-off-by: Xynnn007 <[email protected]>
    @Xynnn007
    Xynnn007 committed Dec 15, 2023
    Configuration menu
    Copy the full SHA
    d4f44a0 View commit details
    Browse the repository at this point in the history

  4. image-rs: get public key from CDH when verifying cosign image signatures 

    Confidential Data Hub now supports to get public key from the different
KMS services. The public keys are for signature verification. As
currently not all non-attestation functionalities of AA are moved to
CDH.

So `confidential-data-hub` is a workaround feature to make the code
compilable without breaking current logic.

After confidential-containers#412 is resolved, we should abandon the `confidential-data-hub`
feature.

Signed-off-by: Xynnn007 <[email protected]>
    @Xynnn007
    Xynnn007 committed Dec 15, 2023
    Configuration menu
    Copy the full SHA
    c39c29d View commit details
    Browse the repository at this point in the history

  5. cdh/kms: add aliyun KMS support for GetPublicKey 

    Signed-off-by: Xynnn007 <[email protected]>
    @Xynnn007
    Xynnn007 committed Dec 15, 2023
    Configuration menu
    Copy the full SHA
    d041954 View commit details
    Browse the repository at this point in the history