Remove the cluster-local block by default. (#224)

This causes problems when it is deployed to a cluster that doesn't use this as its OIDC endpoint.

I have changed the e2e tests to specifically use this config instead.

Signed-off-by: Matt Moore <mattomata@gmail.com>

.github/workflows/verify-k8s.yml

@@ -139,6 +139,26 @@ jobs:
             --clusterrole=system:service-account-issuer-discovery \
             --group=system:unauthenticated
 
+          # Overwrite the configuration to be what we need for KinD.
+          cat <<EOF > config/fulcio-config.yaml
+          apiVersion: v1
+          kind: ConfigMap
+          metadata:
+            name: fulcio-config
+            namespace: fulcio-dev
+          data:
+            config.json: |-
+                {
+                  "OIDCIssuers": {
+                    "https://kubernetes.default.svc": {
+                      "IssuerURL": "https://kubernetes.default.svc",
+                      "ClientID": "sigstore",
+                      "Type": "kubernetes"
+                    }
+                  }
+                }
+          EOF
+
           kubectl create ns fulcio-dev
 
           ko apply -Bf config/

config/fulcio-config.yaml

@@ -22,11 +22,6 @@ data:
               "ClientID": "sigstore",
               "Type": "email"
             },
-            "https://kubernetes.default.svc": {
-              "IssuerURL": "https://kubernetes.default.svc",
-              "ClientID": "sigstore",
-              "Type": "kubernetes"
-            },
             "https://oauth2.sigstore.dev/auth": {
               "IssuerURL": "https://oauth2.sigstore.dev/auth",
               "ClientID": "sigstore",