From 095d64bee1f1330718d010464bc4f51c5cb8e689 Mon Sep 17 00:00:00 2001 From: Radoslav Dimitrov Date: Thu, 9 Nov 2023 15:40:33 +0200 Subject: [PATCH] Set SIGSTORE_NO_CACHE=true in minder Signed-off-by: Radoslav Dimitrov --- deployment/helm/templates/deployment.yaml | 2 ++ docker-compose.yaml | 1 + 2 files changed, 3 insertions(+) diff --git a/deployment/helm/templates/deployment.yaml b/deployment/helm/templates/deployment.yaml index 9881d9c374..b2ecb6eb11 100644 --- a/deployment/helm/templates/deployment.yaml +++ b/deployment/helm/templates/deployment.yaml @@ -64,6 +64,8 @@ spec: value: "/secrets/identity/identity_client_secret" - name: "MINDER_UNSTABLE_TRUSTY_ENDPOINT" value: "{{ .Values.trusty.endpoint }}" + - name: "SIGSTORE_NO_CACHE" + value: "true" # ko will always specify a digest, so we don't need to worry about # CRI image caching diff --git a/docker-compose.yaml b/docker-compose.yaml index c72b286641..99a6f83415 100644 --- a/docker-compose.yaml +++ b/docker-compose.yaml @@ -54,6 +54,7 @@ services: - MINDER_AUTH_REFRESH_TOKEN_PRIVATE_KEY=/app/.ssh/refresh_token_rsa - MINDER_AUTH_REFRESH_TOKEN_PUBLIC_KEY=/app/.ssh/refresh_token_rsa.pub - MINDER_AUTH_TOKEN_KEY=/app/.ssh/token_key_passphrase + - SIGSTORE_NO_CACHE=true networks: - app_net depends_on: