grafeas / kritis

Deploy-time Policy Enforcer for Kubernetes applications
https://github.com/grafeas/kritis/blob/master/docs/binary-authorization.md
Apache License 2.0
696 stars 133 forks source link

Complete Integration of Crypto Library into Kritis #507

Open acamadeo opened 4 years ago

acamadeo commented 4 years ago

This can be broken into stages:

Immediately:


After cryptolib's VerifyAttestation returns an AuthenticatedAttestation:


After implementing PGP signing:


If command line interface allows you to create new keys:

ooq commented 4 years ago

Thanks for tracking this!

acamadeo commented 4 years ago

Completed "Replace RawAttestation..." with #519

acamadeo commented 4 years ago

Completed "Delete CreateAttestationSignature..." with #525

acamadeo commented 4 years ago

Completed "Delete VerifyMessageAttestation..." with #526