Merge pull request #43 from vaikas/use-public-images

Use public images for everything but ctlog (which doesn't have one afaict)
sigstore · Feb 10, 2022 · 0525554 · 0525554
2 parents 4368bb1 + 4885007
commit 0525554
Show file tree

Hide file tree

Showing 23 changed files with 5 additions and 1,464 deletions.
diff --git a/.github/workflows/fulcio-rekor-kind.yaml b/.github/workflows/fulcio-rekor-kind.yaml
@@ -86,7 +86,7 @@ jobs:
 
     - name: Install all the everythings
       working-directory: ./src/github.com//vaikas/sigstore-scaffolding
-      timeout-minutes: 10
+      timeout-minutes: 20
       run: |
         ko apply -BRf ./config/
 

diff --git a/.ko.yaml b/.ko.yaml
diff --git a/cmd/fulcio/server/main.go b/cmd/fulcio/server/main.go
diff --git a/config/fulcio/fulcio/300-fulcio.yaml b/config/fulcio/fulcio/300-fulcio.yaml
@@ -19,7 +19,7 @@ spec:
       # This doesn't actually use Kubernetes credentials, so don't mount them in.
       automountServiceAccountToken: false
       containers:
-      - image: ko://github.com/vaikas/sigstore-scaffolding/cmd/fulcio/server
+      - image: gcr.io/projectsigstore/fulcio@sha256:66870bd6b111f3c5478703a8fb31c062003f0127b2c2c5e49ccd82abc4ec7841
         name: fulcio
         ports:
         - containerPort: 5555

diff --git a/config/rekor/rekor/300-rekor.yaml b/config/rekor/rekor/300-rekor.yaml
@@ -18,7 +18,7 @@ spec:
       serviceAccountName: rekor
       containers:
       - name: rekor
-        image: ko://github.com/sigstore/rekor/cmd/rekor-server
+        image: gcr.io/projectsigstore/rekor-server@sha256:516651575db19412c94d4260349a84a9c30b37b5d2635232fba669262c5cbfa6
         ports:
         - containerPort: 3000
         args: [

diff --git a/config/trillian/trillian-log-server/300-log-server.yaml b/config/trillian/trillian-log-server/300-log-server.yaml
@@ -20,7 +20,7 @@ spec:
       serviceAccountName: trillian
       containers:
       - name: log-server
-        image: ko://github.com/google/trillian/cmd/trillian_log_server
+        image: gcr.io/projectsigstore/trillian_log_server@sha256:f850a0defd089ea844822030c67ae05bc93c91168a7dd4aceb0b6648c39f696b
         args: [
         "--mysql_uri=$(MYSQL_USER):$(MYSQL_PASSWORD)@tcp($(DATABASE_HOSTNAME):3306)/$(DATABASE_NAME)",
         "--storage_system=mysql",

diff --git a/config/trillian/trillian-log-signer/300-log-signer.yaml b/config/trillian/trillian-log-signer/300-log-signer.yaml
@@ -66,7 +66,7 @@ spec:
               secretKeyRef:
                 name: trillian-client
                 key: host
-        image: ko://github.com/google/trillian/cmd/trillian_log_signer
+        image: gcr.io/projectsigstore/trillian_log_signer@sha256:fe90d523f6617974f70878918e4b31d49b2b46a86024bb2d6b01d2bbfed8edbf 
         ports:
         - name: h2c
           containerPort: 8090
diff --git a/go.sum b/go.sum
diff --git a/hack/tools.go b/hack/tools.go
@@ -17,7 +17,4 @@ import (
 
 	// Import things that we build using ko
 	_ "github.com/google/certificate-transparency-go/trillian/ctfe/ct_server"
-	_ "github.com/google/trillian/cmd/trillian_log_server"
-	_ "github.com/google/trillian/cmd/trillian_log_signer"
-	_ "github.com/sigstore/rekor/cmd/rekor-server"
 )
diff --git a/third_party/VENDOR-LICENSE/cloud.google.com/go/LICENSE b/third_party/VENDOR-LICENSE/cloud.google.com/go/LICENSE