search

GoogleCloudPlatform / solutions-modern-cicd-anthos

An end-to-end operating model for onboarding and continually deploying services with Anthos.
Apache License 2.0
86 stars 60 forks source link

Adding binary authorization flow to application project pipelines #91

Closed mike-ensor closed 4 years ago

mike-ensor commented 4 years ago

Before: Binary Authorization is installed and the default policy is "DryRun" mode. Three attestors are already created along with their asymmetric keys and all functionality to create Attestations.

After: Attestations will be created by their respective attestors at the "build" (image creation), "quality" (staging environment signoff), "security" (post first prod, before second prod push).

Only the Java template has the new attestations added. NO change to the policy has been made, Dry Run / logging is still used.

mike-ensor commented 4 years ago

Will squash & merge when "LGTM" approval.