Support GitLab Inc's build and release instances as OIDC providers (#…

…1327) Signed-off-by: Balasankar 'Balu' C <[email protected]> Co-authored-by: Balasankar 'Balu' C <[email protected]>
sigstore · Sep 5, 2023 · c68e1ef · c68e1ef
1 parent 2cfac2f
commit c68e1ef
Show file tree

Hide file tree

Showing 3 changed files with 46 additions and 0 deletions.
diff --git a/config/fulcio-config.yaml b/config/fulcio-config.yaml
@@ -38,6 +38,11 @@ data:
               "ClientID": "sigstore",
               "Type": "email"
             },
+            "https://dev.gitlab.org": {
+              "IssuerURL": "https://dev.gitlab.org",
+              "ClientID": "sigstore",
+              "Type": "gitlab-pipeline"
+            },
             "https://gitlab.archlinux.org": {
               "IssuerURL": "https://gitlab.archlinux.org",
               "ClientID": "sigstore",
@@ -54,6 +59,11 @@ data:
               "Type": "email",
               "IssuerClaim": "$.federated_claims.connector_id"
             },
+            "https://ops.gitlab.net": {
+              "IssuerURL": "https://ops.gitlab.net",
+              "ClientID": "sigstore",
+              "Type": "gitlab-pipeline"
+            },
             "https://token.actions.githubusercontent.com": {
               "IssuerURL": "https://token.actions.githubusercontent.com",
               "ClientID": "sigstore",

diff --git a/federation/dev.gitlab.org/config.yaml b/federation/dev.gitlab.org/config.yaml
@@ -0,0 +1,18 @@
+# Copyright 2023 The Sigstore Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+url: https://dev.gitlab.org
+contact: [email protected]
+description: "GitLab OIDC tokens for job identity"
+type: "gitlab-pipeline"
diff --git a/federation/ops.gitlab.net/config.yaml b/federation/ops.gitlab.net/config.yaml
@@ -0,0 +1,18 @@
+# Copyright 2023 The Sigstore Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+url: https://ops.gitlab.net
+contact: [email protected]
+description: "GitLab OIDC tokens for job identity"
+type: "gitlab-pipeline"