Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding initial support for Eviden Trustway HSM #162

Open
wants to merge 6 commits into
base: main
Choose a base branch
from

Conversation

mauricioharley
Copy link
Contributor

@mauricioharley mauricioharley commented Sep 20, 2024

The shell script automates the necessary steps to include Eviden's Trustway HSM (Hardware Security Module) client software into the container images for Barbican API and Barbican Worker.

The code is the initial support spec to include the same vendor and product.

@openshift-ci openshift-ci bot requested review from d34dh0r53 and stuggi September 20, 2024 15:30
Copy link

openshift-ci bot commented Sep 20, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: mauricioharley

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@mauricioharley
Copy link
Contributor Author

/retest

@mauricioharley mauricioharley changed the title Adding script to customize images for Eviden Trustway Adding initial support Eviden Trustway HSM Sep 27, 2024
@mauricioharley mauricioharley changed the title Adding initial support Eviden Trustway HSM Adding initial support for Eviden Trustway HSM Sep 27, 2024
Mauricio Harley added 2 commits October 1, 2024 13:31
@@ -35,6 +35,10 @@ spec:
spec:
description: BarbicanAPISpec defines the desired state of BarbicanAPI
properties:
clientCertificate:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe we should consider grouping these into their own key. e.g.

spec:
  ...
  properties:
    pkcs11:
      clientCertificate: $CERT_CONTENTS_HERE

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Got it. $CERT_CONTENTS_HERE will receive the OpenShift secret name that actually stores the certificate.

This file was automatically generated by a pre-commit hook. I'll check how this could be translated into the specification file.

Copy link
Contributor

@vakwetu vakwetu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There are a whole bunch of changes here which are for the CRD, for which we decided to do differently in the lunasa patch. I had thought that this PR had been modified to only contain the scripts. But I still see them here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants