search

sigstore / helm-charts

Helm charts for sigstore project
Apache License 2.0
65 stars 92 forks source link

light tool to create/sign (via kms) fulcio/tsa certs (ca, leaf etc) #863

Closed ianhundere closed 3 days ago

ianhundere commented 6 days ago

Description

this is something we automated w/ smallstep's step-cli tool, but i've been playing with the smallstep crypto library to do the same and was curious if there'd be interest in accepting a small cloud agnostic go app to specifically create/sign (via awskms, cloudkms, or azurekms) certificates for fulcio, tsa etc either in the helm charts or elsewhere ( e.g. scaffolding).

ps tho i understand the intent in keeping the helm charts simple as mentioned by @bobcallaway.

vipulagarwal commented 6 days ago

I think the community will definitely benefit with some tooling in this area. @sfox-equinix wrote a tool for us that helps with awskms fulcio pki. I am sure others might have their own tooling solving the same thing.

ianhundere commented 3 days ago

closing this in favor of cross post.

https://github.com/sigstore/scaffolding/issues/1334