set verify k8s workflow for get configg directly

Signed-off-by: Javan lacerda <[email protected]>

.github/workflows/verify-k8s.yml

@@ -39,31 +39,13 @@ jobs:
       - name: Install kubeval
         run: go install github.com/instrumenta/[email protected]
 
-      - run: kubeval config/*.yaml
+      - name: Run kubeval for deployment
+        run: kubeval config/deployment.yaml
 
   verify-k8s-deployment:
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false # Keep running if one leg fails.
-      matrix:
-        issuer:
-        - "OIDC Issuer"
-        - "Meta Issuer"
-
-        include:
-        - issuer: "OIDC Issuer"
-          issuer-config: |
-            oidc-issuers:
-              https://kubernetes.default.svc:
-                issuer-url: https://kubernetes.default.svc
-                client-id: sigstore
-                type: kubernetes
-        - issuer: "Meta Issuer"
-          issuer-config: |
-            meta-issuers:
-              https://kubernetes.*.svc:
-                client-id: sigstore
-                type: kubernetes
     env:
       # https://github.com/google/go-containerregistry/pull/125 allows insecure registry for
       # '*.local' hostnames. This works both for `ko` and our own tag-to-digest resolution logic,
@@ -121,7 +103,6 @@ jobs:
                 port: 2112
                 targetPort: 2112
           EOF
-
           # Overwrite the configuration to be what we need for KinD.
           cat <<EOF > config/fulcio-config.yaml
           apiVersion: v1
@@ -131,9 +112,7 @@ jobs:
             namespace: fulcio-system
           data:
             config.yaml: |-
-              {
-                ${{ matrix.issuer-config }}
-              }
+            $(tail -n+15 config/config.yaml | sed 's/^/  /')
             server.yaml: |-
               host: 0.0.0.0
               port: 5555
@@ -145,7 +124,8 @@ jobs:
               ct-log-url: ""
               log_type: prod
           EOF
-
+          
+          cat config/fulcio-config.yaml
           # Create secret needed to use fileca
           cat <<EOF > config/fulcio-secret.yaml
           apiVersion: v1