octo
/
Zebra
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Revert "Sign container images for later binary authorization" 

This reverts commit 0bb8b2b059.
This commit is contained in:
Deirdre Connolly 2020-06-25 17:01:32 -04:00
parent 038a09ad36
commit eff8a3889e
1 changed files with 0 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
.github/workflows/cd.yml vendored
View File

@ -45,17 +45,6 @@ jobs:
--machine-type n1-highcpu-32 \ --machine-type n1-highcpu-32 \
--timeout 3600s \ --timeout 3600s \
# Create an attestation on the new image with our existing attestor
- name: Create attestation
run: |
ARTIFACT_URL=$(gcloud container images describe "gcr.io/$PROJECT_ID/$BRANCH_NAME:$SHA7" \
--format="value(image_summary.fully_qualified_digest)");
gcloud alpha container binauthz attestations sign-and-create \
--artifact-url="${ARTIFACT_URL}" \
--attestor="projects/zealous-zebra/attestors/zebrad-attestor" \
--keyversion="projects/zealous-zebra/locations/global/keyRings/binary-authorization/cryptoKeys/zebrad-attestor/cryptoKeyVersions/1";
# Create instance template from container image # Create instance template from container image
- name: Create instance template - name: Create instance template
run: | run: |