-
Notifications
You must be signed in to change notification settings - Fork 25
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Adding initial support for Eviden Trustway HSM #162
base: main
Are you sure you want to change the base?
Adding initial support for Eviden Trustway HSM #162
Conversation
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: mauricioharley The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/retest |
Signed-off-by: Mauricio Harley <[email protected]>
Signed-off-by: Mauricio Harley <[email protected]>
Signed-off-by: Mauricio Harley <[email protected]>
@@ -35,6 +35,10 @@ spec: | |||
spec: | |||
description: BarbicanAPISpec defines the desired state of BarbicanAPI | |||
properties: | |||
clientCertificate: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe we should consider grouping these into their own key. e.g.
spec:
...
properties:
pkcs11:
clientCertificate: $CERT_CONTENTS_HERE
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Got it. $CERT_CONTENTS_HERE will receive the OpenShift secret name that actually stores the certificate.
This file was automatically generated by a pre-commit hook. I'll check how this could be translated into the specification file.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There are a whole bunch of changes here which are for the CRD, for which we decided to do differently in the lunasa patch. I had thought that this PR had been modified to only contain the scripts. But I still see them here.
The shell script automates the necessary steps to include Eviden's Trustway HSM (Hardware Security Module) client software into the container images for Barbican API and Barbican Worker.
The code is the initial support spec to include the same vendor and product.