Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make bootstrapping SSF easier (e.g. generating and storing keys) #42

Open
mlieberman85 opened this issue Nov 5, 2021 · 3 comments
Open
Labels
enhancement New feature or request

Comments

@mlieberman85
Copy link
Contributor

Is your feature request related to a problem? Please describe.
The problem is when someone runs this the first time they have to generate their own keys. If they are using a local k8s like minikube or kind, if it crashes they potentially lose their keys if they're not stored right.

Additionally we need a way of bootstrapping SSF for a real demo or test environment as well.

Same goes for Vault keys.

How should we generate and store keys such that in case of a failure during dev work users don't have to generate all new keys each time.

Is there a way to encrypt and secure the keys for backup purposes in an easy way.


A reason why we might want backups is if we are signing our artifacts and validating them, if we lose our keys it means we need to rebuild and resign everything again, even when doing dev work.

Either we need a way of backing up the keys, or a way of quickly rebuilding, resigning everything. Key management is hard :(

@mlieberman85 mlieberman85 added the enhancement New feature or request label Nov 5, 2021
@mlieberman85
Copy link
Contributor Author

Is it faster to restore from backup or just regenerate keys and resign everything with new keys?

@mlieberman85
Copy link
Contributor Author

We need both a dev answer and production answer.

@mlieberman85
Copy link
Contributor Author

We just need to keep repaving of the SSF quick, e.g. generating new keys, rebuilding images, etc.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant