Skip to content

Commit 68aa47a

Browse files
committed
fix: uncomment pcrStash in template, required for attestation
1 parent d338ae4 commit 68aa47a

1 file changed

Lines changed: 8 additions & 10 deletions

File tree

values-secret.yaml.template

Lines changed: 8 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -71,16 +71,14 @@ secrets:
7171
# path: ~/.coco-pattern/cosign-key-0.pub
7272

7373

74-
# Cosign public keys for image signature verification
75-
# Required when using the "signed" policy above.
76-
# Add your cosign public key files here.
77-
# Generate a cosign key pair: cosign generate-key-pair
78-
#- name: pcrStash
79-
# vaultPrefixes:
80-
# - hub
81-
# fields:
82-
# - name: json
83-
# path: ~/.coco-pattern/measurements.json
74+
# PCR measurements for attestation.
75+
# Required: run ./scripts/get-pcr.sh before deploying.
76+
- name: pcrStash
77+
vaultPrefixes:
78+
- hub
79+
fields:
80+
- name: json
81+
path: ~/.coco-pattern/measurements.json
8482

8583

8684
- name: attestationStatus

0 commit comments

Comments
 (0)