Review secrets manager for OCI/Git/Cosign #22
Description
GIt
-
pull (dev/serving/run)
-
pull/push (build/full)
-
private repos (+- CA), Flux (pull), Tekton (push)
-
public repos, Flux (pull), Tekton (push)
OCI
-
pull/push (dev/build/full)
-
pull (run/serving)
-
1st party push (kpack), pull (flux, knative)
-
3rd party pull (everything)
-
private repos (+- CA)
Cosign
- dev (private key)
- build (private key)
- run, serving (public key)
- full (private key, public key)