Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SECURESIGN-663] Add option to set an external ctlog service #465

Merged
merged 1 commit into from
Jul 4, 2024

Conversation

fghanmi
Copy link
Contributor

@fghanmi fghanmi commented Jun 25, 2024

No description provided.

@openshift-ci openshift-ci bot requested review from cooktheryan and JasonPowr June 25, 2024 14:56
@fghanmi fghanmi requested a review from osmman June 25, 2024 14:58
api/v1alpha1/common.go Outdated Show resolved Hide resolved
@fghanmi fghanmi force-pushed the SECURESIGN-663 branch 2 times, most recently from 562c9b6 to 5386ad4 Compare June 26, 2024 10:41
@fghanmi fghanmi requested a review from osmman June 26, 2024 13:07
case instance.Spec.Ctlog.Port == nil && instance.Spec.Ctlog.Address != "":
err = fmt.Errorf("%w", CtlogPortNotSpecified)
case instance.Spec.Ctlog.Address == "":
ctlogUrl = fmt.Sprintf("http://ctlog.%s.svc/trusted-artifact-signer", instance.Namespace)
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can extract https://github.com/securesign/secure-sign-operator/blob/main/internal/controller/ctlog/utils/ctlog_config.go#L177 to constant and reuse for better transparency. (it is not clear from where the URL suffix is getting there).

var err error
var ctlogUrl string
switch {
case instance.Spec.Ctlog.Port == nil && instance.Spec.Ctlog.Address != "":
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

operator will fails on fatal error if port is nil and address has any non empty value. It will unable to dereference *instance.Spec.Ctlog.Port value if it is nil.

Please do that same way as rekor deployment.

internal/controller/fulcio/utils/fulcio_deployment.go Outdated Show resolved Hide resolved
@osmman
Copy link
Contributor

osmman commented Jul 2, 2024

Please run make generate manifest bundle command to generate all manifests and bundle metadata

@fghanmi fghanmi force-pushed the SECURESIGN-663 branch 10 times, most recently from 317e8e8 to 5151079 Compare July 2, 2024 13:22
@fghanmi fghanmi force-pushed the SECURESIGN-663 branch 4 times, most recently from ab5cd59 to 88cb767 Compare July 3, 2024 12:08
@fghanmi fghanmi requested a review from osmman July 3, 2024 14:10
@fghanmi fghanmi requested a review from bouskaJ July 3, 2024 14:10
@osmman
Copy link
Contributor

osmman commented Jul 4, 2024

/lgtm

@openshift-ci openshift-ci bot added the lgtm label Jul 4, 2024
Copy link

openshift-ci bot commented Jul 4, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: fghanmi, osmman

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved label Jul 4, 2024
@openshift-merge-bot openshift-merge-bot bot merged commit 1d2b88a into main Jul 4, 2024
15 checks passed
@osmman osmman deleted the SECURESIGN-663 branch July 4, 2024 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants