Merge pull request #578 from mythi/kbs-config-fixes

kbs: fix configs in kubernetes deployments
confidential-containers · Nov 15, 2024 · 4537f6f · 4537f6f
2 parents d78e054 + 4bc7aa3
commit 4537f6f
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/kbs/config/kubernetes/base/kbs-config.toml b/kbs/config/kubernetes/base/kbs-config.toml
@@ -22,3 +22,8 @@ attestation_token_broker = "Simple"
 
 [admin]
 auth_public_key = "/kbs/kbs.pem"
+
+[[plugins]]
+name = "resource"
+type = "LocalFs"
+dir_path = "/opt/confidential-containers/kbs/repository"
diff --git a/kbs/config/kubernetes/ita/kbs-config.toml b/kbs/config/kubernetes/ita/kbs-config.toml
@@ -5,7 +5,7 @@ sockets = ["0.0.0.0:8080"]
 insecure_http = true
 
 [attestation_token]
-trusted_certs_paths = ["https://portal.trustauthority.intel.com"]
+trusted_jwk_sets = ["https://portal.trustauthority.intel.com"]
 
 [attestation_service]
 type = "intel_ta"
@@ -15,3 +15,8 @@ certs_file = "https://portal.trustauthority.intel.com"
 
 [admin]
 auth_public_key = "/kbs/kbs.pem"
+
+[[plugins]]
+name = "resource"
+type = "LocalFs"
+dir_path = "/opt/confidential-containers/kbs/repository"