Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Docker Content Trust

Description

Docker Content Trust (DCT) is a mechanism for signing Docker images that are uploaded to the Docker Hub that guarantees to people pulling the images that they were in fact created by OpenNMS. 

Given that the operator will be available for public consumption, and will be given sensitive access to people's k8s clusters, having DCT setup for the operator's image seems like a good idea. 

Acceptance / Success Criteria

Images produced by the Operator's CircleCI pipeline should be signed with DCT

Lucidchart Diagrams

Activity

Show:
Done

Details

Assignee

Reporter

Sprint

Priority

Parent

PagerDuty

Created November 2, 2021 at 2:20 PM
Updated November 4, 2021 at 7:12 PM
Resolved November 4, 2021 at 7:12 PM