Document Staging instance usage with Keyless #1824
Conversation
Codecov Report
@@ Coverage Diff @@
## main #1824 +/- ##
=======================================
Coverage 33.02% 33.02%
=======================================
Files 147 147
Lines 9347 9347
=======================================
Hits 3087 3087
Misses 5906 5906
Partials 354 354 Continue to review full report at Codecov.
|
| * https://rekor.sigstage.dev | ||
| * https://oauth2.sigstage.dev/auth | ||
|
|
||
| These instances are operated and maintained in the same manner as the public production environment for Sigstore. |
There was a problem hiding this comment.
There will be no SLO provided nor the same protection of the root key material for TUF. We should loudly note this, that this is staging and never should be used for production.
There was a problem hiding this comment.
added note about slo and not for production use.
| * Steps 1-4 configures your local environment to use the staging keys and certificates. | ||
| * Step 5 specify the staging environment with flags needed for signing. | ||
| * Step 6 specify the staging environment with flags needed for verifying. | ||
|
|
There was a problem hiding this comment.
Can we also note how to get back to using production, rm the Sigstore directory and init?
There was a problem hiding this comment.
good point.
added steps to revert to production
Signed-off-by: Kenny Leung <kleung@chainguard.dev>
Signed-off-by: Kenny Leung <kleung@chainguard.dev>
Signed-off-by: Kenny Leung kleung@chainguard.dev
Summary
This is to document how to use the staging Sigstore instance with keyless signing.
@haydentherapper @priyawadhwa PTAL
Ticket Link
Fixes
Release Note