Bump all sigstore components. Use GODEBUG=netdns=go for fulcio. (#316)

Signed-off-by: Ville Aikas <[email protected]> Signed-off-by: Ville Aikas <[email protected]>
sigstore · Aug 23, 2022 · 1be83b7 · 1be83b7
1 parent e995aaa
commit 1be83b7
Show file tree

Hide file tree

Showing 6 changed files with 7 additions and 7 deletions.
diff --git a/config/fulcio/fulcio/300-fulcio.yaml b/config/fulcio/fulcio/300-fulcio.yaml
@@ -20,8 +20,7 @@ spec:
       # This doesn't actually use Kubernetes credentials, so don't mount them in.
       automountServiceAccountToken: false
       containers:
-      # v0.5.2
-      - image: gcr.io/projectsigstore/fulcio:v0.5.2
+      - image: gcr.io/projectsigstore/fulcio@sha256:61081295a8f75ed7537b5d1f8c7320e078dc00e4562c0bf605fbefa062c690de # v0.5.3
         name: fulcio
         ports:
         - containerPort: 5555
@@ -42,6 +41,9 @@ spec:
             secretKeyRef:
               name: fulcio-secret
               key: password
+        # Force a native go address resolution.
+        - name: GODEBUG
+          value: "netdns=go"
         volumeMounts:
         - name: fulcio-config
           mountPath: /etc/fulcio-config

diff --git a/config/rekor/rekor/300-rekor.yaml b/config/rekor/rekor/300-rekor.yaml
@@ -19,7 +19,7 @@ spec:
       serviceAccountName: rekor
       containers:
       - name: rekor
-        image: gcr.io/projectsigstore/rekor-server@sha256:851f9d63879655156293cfe501976004ffab0093409596cf7f0f0099867d9d39 # v0.10.0
+        image: gcr.io/projectsigstore/rekor-server@sha256:af91aee88c6d8efb3175b441420a4c61691ec5d6a72303c8ef47750c1dfd2325 # v0.11.0
         ports:
         - containerPort: 3000
         args: [

diff --git a/config/trillian/trillian-log-server/300-log-server.yaml b/config/trillian/trillian-log-server/300-log-server.yaml
@@ -18,7 +18,7 @@ spec:
       serviceAccountName: trillian
       containers:
       - name: log-server
-        image: gcr.io/projectsigstore/trillian_log_server@sha256:f850a0defd089ea844822030c67ae05bc93c91168a7dd4aceb0b6648c39f696b
+        image: gcr.io/projectsigstore/trillian_log_server@sha256:04c648cccf6d631caefba5d41ae3bcb9fc6e830f845a34a230e7590cd05a6904 # v0.11.0
         args: [
           "--mysql_uri=$(MYSQL_USER):$(MYSQL_PASSWORD)@tcp($(DATABASE_HOSTNAME):3306)/$(DATABASE_NAME)",
           "--mysql_max_idle_conns=0",

diff --git a/config/trillian/trillian-log-signer/300-log-signer.yaml b/config/trillian/trillian-log-signer/300-log-signer.yaml
@@ -64,7 +64,7 @@ spec:
               secretKeyRef:
                 name: trillian-database
                 key: host
-        image: gcr.io/projectsigstore/trillian_log_signer@sha256:fe90d523f6617974f70878918e4b31d49b2b46a86024bb2d6b01d2bbfed8edbf
+        image: gcr.io/projectsigstore/trillian_log_signer@sha256:2f80647c4c81621ba850b4993bdd4332a63570e775f81fe124e946e947fd29c8 # v0.11.0
         ports:
         - name: h2c
           containerPort: 8090
diff --git a/hack/setup-scaffolding-from-release.sh b/hack/setup-scaffolding-from-release.sh
@@ -55,7 +55,6 @@ kubectl apply -f "${TRILLIAN}"
 echo '::endgroup::'
 
 echo '::group:: Wait for Trillian ready'
-kubectl wait --timeout 5m -n trillian-system --for=condition=Complete jobs --all
 kubectl wait --timeout 2m -n trillian-system --for=condition=Ready ksvc log-server
 kubectl wait --timeout 2m -n trillian-system --for=condition=Ready ksvc log-signer
 echo '::endgroup::'

diff --git a/hack/setup-scaffolding.sh b/hack/setup-scaffolding.sh
@@ -33,7 +33,6 @@ make ko-apply-trillian
 echo '::endgroup::'
 
 echo '::group:: Wait for Trillian ready'
-kubectl wait --timeout 5m -n trillian-system --for=condition=Complete jobs --all
 kubectl wait --timeout 2m -n trillian-system --for=condition=Ready ksvc log-server
 kubectl wait --timeout 2m -n trillian-system --for=condition=Ready ksvc log-signer
 echo '::endgroup::'