-
Notifications
You must be signed in to change notification settings - Fork 142
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[DRAFT] Create new-idp-requirements.md #1447
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #1447 +/- ##
==========================================
- Coverage 57.67% 57.58% -0.10%
==========================================
Files 50 50
Lines 3112 3112
==========================================
- Hits 1795 1792 -3
- Misses 1158 1160 +2
- Partials 159 160 +1 ☔ View full report in Codecov by Sentry. |
@haydentherapper This one is ready for another round of reviews. I think I got everything but let me know if I missed something or if anything needs more details. |
Creating a new document to capture the requirements for adding a new IDP to Sigstore Public Deployment Signed-off-by: Paul Welch <pwelch@github.com>
Signed-off-by: Paul Welch <pwelch@github.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you so much for writing this! Just a few last comments, this looks great.
docs/new-idp-requirements.md
Outdated
|
||
You should also reference the [Fulcio - ODIC.md](https://github.com/sigstore/fulcio/blob/main/docs/oidc.md) documentation for additional requirements for the type of IDP you're looking to integrate. The current two likely types of IDPs are: | ||
|
||
- `Email` - Email-based OIDC providers use the user’s email as the subject of the certificate. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we change this to also mention service accounts? It can either be user-based authentication or machine identity for SAs
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think I captured what you're looking for but let me know if not
Signed-off-by: Paul Welch <pwelch@github.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This looks great, thanks again for writing this up!
Summary
Starting a new document to capture the requirements for adding a new IDP to Sigstore Public Deployment as proposed in #397
Release Note
Documentation