Skip to content

Commit 8600d62

Browse files
authored
Add documentation on values for the Supply Chain use case (#92)
* Add documentation on values for the Supply Chain use case Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com> * Align documentation with BYO changes Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com> * Replace the value references by using gen-feature-variants script Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com> * Fix Quay user name Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com> --------- Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com>
1 parent 5840c12 commit 8600d62

1 file changed

Lines changed: 18 additions & 2 deletions

File tree

docs/supply-chain.md

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,13 +36,29 @@ In our demo, we will use a number of additional ZTVP components. These component
3636
* [Multicloud Object Gateway](https://docs.redhat.com/en/documentation/red_hat_openshift_container_storage/4.8/html/managing_hybrid_and_multicloud_resources/index) is a data service for OpenShift that provides an S3-compatible object storage. In our case, this component is necessary to provide a storage system to Quay.
3737
* [Red Hat OpenShift Pipelines](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines/1.20) is a cloud-native CI/CD solution built on the Tekton framework. We will use this product to automate our secure supply chain process, but you could use your own CI/CD solution if one exists.
3838

39+
### Enabling this Use Case
40+
41+
To configure the appropriate values in the [values-hub.yaml](../values-hub.yaml) file, we can be use the [gen-feature-variants script](../scripts/gen-feature-variants.md).
42+
43+
For the Secure Supply Chain use case, the command would be:
44+
45+
```shell
46+
python3 scripts/gen-feature-variants.py --base values-hub.yaml --features supply-chain --registry-option <id>
47+
```
48+
49+
Where `<id>` is one of the options available in _Bring Your Own (BYO) Container Registry_:
50+
51+
1. Embedded Quay Registry
52+
2. External Registry
53+
3. Embedded Internal Registry
54+
3955
## Bring Your Own (BYO) Container Registry
4056

4157
By default, ZTVP deploys a built-in Red Hat Quay registry. However, you can use your own container registry (e.g., quay.io, Docker Hub, GitHub Container Registry, or a private registry) instead.
4258

4359
### Configuration Steps
4460

45-
1. **Disable built-in Quay registry** (optional - if not using Quay): Comment out the Quay-related applications in `values-hub.yaml`: `quay-enterprise` namespace, `quay-operator` subscription, and `quay-registry` application.
61+
1. **Disable built-in Quay registry** (optional - if not using Quay): Comment out the Quay-related applications in `values-hub.yaml`: `quay-enterprise` namespace, `quay-operator` subscription, and `quay-registry` application. Remove the `applications.supply-chain.overrides.quay.enabled` and `applications.supply-chain.overrides.registry.tlsVerify` settings.
4662

4763
2. **Configure registry credentials in Vault** (**BYO registry only**): Per VP rule, add your registry credentials to `~/values-secrets.yaml` (or `~/values-secret.yaml` / `~/values-secret-layered-zero-trust.yaml` per VP lookup order):
4864

@@ -213,7 +229,7 @@ resourceHealthChecks:
213229
return hs
214230
```
215231

216-
## Pipeline
232+
## Automated Secure Supply Chain Pipeline
217233

218234
To build and certify the application, we will use _Red Hat OpenShift Pipelines_.
219235

0 commit comments

Comments
 (0)