You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add documentation on values for the Supply Chain use case (#92)
* Add documentation on values for the Supply Chain use case
Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com>
* Align documentation with BYO changes
Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com>
* Replace the value references by using gen-feature-variants script
Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com>
* Fix Quay user name
Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com>
---------
Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com>
Copy file name to clipboardExpand all lines: docs/supply-chain.md
+18-2Lines changed: 18 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -36,13 +36,29 @@ In our demo, we will use a number of additional ZTVP components. These component
36
36
*[Multicloud Object Gateway](https://docs.redhat.com/en/documentation/red_hat_openshift_container_storage/4.8/html/managing_hybrid_and_multicloud_resources/index) is a data service for OpenShift that provides an S3-compatible object storage. In our case, this component is necessary to provide a storage system to Quay.
37
37
*[Red Hat OpenShift Pipelines](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines/1.20) is a cloud-native CI/CD solution built on the Tekton framework. We will use this product to automate our secure supply chain process, but you could use your own CI/CD solution if one exists.
38
38
39
+
### Enabling this Use Case
40
+
41
+
To configure the appropriate values in the [values-hub.yaml](../values-hub.yaml) file, we can be use the [gen-feature-variants script](../scripts/gen-feature-variants.md).
42
+
43
+
For the Secure Supply Chain use case, the command would be:
Where `<id>` is one of the options available in _Bring Your Own (BYO) Container Registry_:
50
+
51
+
1. Embedded Quay Registry
52
+
2. External Registry
53
+
3. Embedded Internal Registry
54
+
39
55
## Bring Your Own (BYO) Container Registry
40
56
41
57
By default, ZTVP deploys a built-in Red Hat Quay registry. However, you can use your own container registry (e.g., quay.io, Docker Hub, GitHub Container Registry, or a private registry) instead.
42
58
43
59
### Configuration Steps
44
60
45
-
1.**Disable built-in Quay registry** (optional - if not using Quay): Comment out the Quay-related applications in `values-hub.yaml`: `quay-enterprise` namespace, `quay-operator` subscription, and `quay-registry` application.
61
+
1.**Disable built-in Quay registry** (optional - if not using Quay): Comment out the Quay-related applications in `values-hub.yaml`: `quay-enterprise` namespace, `quay-operator` subscription, and `quay-registry` application. Remove the `applications.supply-chain.overrides.quay.enabled` and `applications.supply-chain.overrides.registry.tlsVerify` settings.
46
62
47
63
2.**Configure registry credentials in Vault** (**BYO registry only**): Per VP rule, add your registry credentials to `~/values-secrets.yaml` (or `~/values-secret.yaml` / `~/values-secret-layered-zero-trust.yaml` per VP lookup order):
48
64
@@ -213,7 +229,7 @@ resourceHealthChecks:
213
229
return hs
214
230
```
215
231
216
-
## Pipeline
232
+
## Automated Secure Supply Chain Pipeline
217
233
218
234
To build and certify the application, we will use _Red Hat OpenShift Pipelines_.
0 commit comments