Add new format for AKS OIDC issuer (#971)

* Add new format for AKS OIDC issuer Signed-off-by: Yoriyasu Yano <[email protected]> * Change order in fulcio-config.yaml so that it matches what is autogenerated Signed-off-by: Yoriyasu Yano <[email protected]> Signed-off-by: Yoriyasu Yano <[email protected]>
sigstore · Jan 24, 2023 · 16b975b · 16b975b
1 parent 8975dfd
commit 16b975b
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/config/fulcio-config.yaml b/config/fulcio-config.yaml
@@ -46,6 +46,10 @@ data:
             }
           },
           "MetaIssuers": {
+            "https://*.oic.prod-aks.azure.com/*": {
+              "ClientID": "sigstore",
+              "Type": "kubernetes"
+            },
             "https://container.googleapis.com/v1/projects/*/locations/*/clusters/*": {
               "ClientID": "sigstore",
               "Type": "kubernetes"

diff --git a/federation/main.go b/federation/main.go
@@ -76,6 +76,10 @@ func main() {
 				ClientID: "sigstore",
 				Type:     "kubernetes",
 			},
+			"https://*.oic.prod-aks.azure.com/*": {
+				ClientID: "sigstore",
+				Type:     "kubernetes",
+			},
 		},
 	}
 	for _, m := range matches {