mirror of
https://github.com/siderolabs/talos.git
synced 2026-04-12 01:01:07 +02:00
7f2eb48561
Add support for whole machine-wide image verification configuration. Configuration is a set of rules applied top-down to the image reference, each specifying a specific cosign-based identity or static public key claim. Talos provides a machined API to verify an image reference, resolving it to the digest on the way as needed. Talos itself hooks up in the image verification process, while containerd CRI plugin accesses same API via the machined socket. Signed-off-by: Laura Brehm <laurabrehm@hey.com> Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
36 lines
872 B
Bash
Executable File
36 lines
872 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -eou pipefail
|
|
|
|
source ./hack/test/e2e.sh
|
|
|
|
PROVISIONER=docker
|
|
CLUSTER_NAME=e2e-${PROVISIONER}
|
|
|
|
function create_cluster {
|
|
build_registry_mirrors
|
|
|
|
"${TALOSCTL}" cluster create docker \
|
|
--name="${CLUSTER_NAME}" \
|
|
--kubernetes-version=${KUBERNETES_VERSION} \
|
|
--image="${IMAGE}" \
|
|
--workers=1 \
|
|
--mtu=1430 \
|
|
--config-patch=hack/test/patches/image-verification.yaml \
|
|
"${REGISTRY_MIRROR_FLAGS[@]}"
|
|
|
|
"${TALOSCTL}" config node 10.5.0.2
|
|
}
|
|
|
|
function destroy_cluster() {
|
|
"${TALOSCTL}" cluster destroy --name "${CLUSTER_NAME}" --provisioner "${PROVISIONER}" --save-support-archive-path=/tmp/support-${CLUSTER_NAME}.zip
|
|
}
|
|
|
|
trap destroy_cluster SIGINT EXIT
|
|
|
|
create_cluster
|
|
get_kubeconfig
|
|
${KUBECTL} config set-cluster e2e-docker --server https://10.5.0.2:6443
|
|
run_talos_integration_test_docker
|
|
run_kubernetes_integration_test
|