28 lines
684 B
YAML
28 lines
684 B
YAML
certDir: /certs
|
|
clientCAFile: /tmp/gatekeeper/ca.crt
|
|
port: 8090
|
|
|
|
# uncomment these lines to use the dev TUF root
|
|
# tufRoot: dev
|
|
# tufMetadataSource: https://docker.github.io/tuf-dev/metadata
|
|
# tufTargetsSource: https://docker.github.io/tuf-dev/targets
|
|
|
|
tufMetadataSource: https://docker.github.io/tuf-staging/metadata
|
|
tufTargetsSource: https://docker.github.io/tuf-staging/targets
|
|
|
|
provider:
|
|
timeout: 30
|
|
tls:
|
|
caBundle: ""
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: false # need to fix go-tuf temp dir
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
seccompProfile:
|
|
type: RuntimeDefault
|