Skip to content

Commit

Permalink
k8s: remove token signer from k8s config
Browse files Browse the repository at this point in the history
The Kata CI does not setup the attestation token signing keys. This
causes the KBS to break when we bump the repo version and pick up this
new config which had the signing key specified.

In the future we can change the CI to setup the signing keys (although
we are already testing this in our Makefile test), but for now let's
stick with the existing behavior.

Signed-off-by: Tobin Feldman-Fitzthum <tobin@linux.ibm.com>
  • Loading branch information
fitzthum committed Jan 7, 2025
1 parent 1111d4e commit ea8f88f
Showing 1 changed file with 0 additions and 3 deletions.
3 changes: 0 additions & 3 deletions kbs/config/kubernetes/base/kbs-config.toml
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,6 @@ work_dir = "/opt/confidential-containers/attestation-service"
type = "Ear"
duration_min = 5

[attestation_service.attestation_token_broker.signer]
key_path = "/kbs/as-private-key.pem"

[attestation_service.rvps_config]
type = "BuiltIn"

Expand Down

0 comments on commit ea8f88f

Please sign in to comment.