Meru/kyverno
2
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: trust Shikigami's builds (signing key + build exception) #7

Merged
MarioGLealP merged 1 commits from marioglealp/shikigami AGit into main 2026-10-30 22:24:10 +00:00
Conversation 0 Commits 1 Files Changed 3
+24 -1
MarioGLealP commented 2026-10-30 22:20:10 +00:00
Owner
Copy link
Copy source

Shikigami's cosign public key (from its OnboardBuild bootstrap run) and the shikigami-build Pod Security exception, as for Thoth. Nothing runs in either namespace until the fence + deploy files land, so merge order doesn't matter. 🤖 Generated with Claude Code - https://claude.ai/code/session_01MdS1HcMerN6toVuLY5K4MR

Shikigami's cosign public key (from its OnboardBuild bootstrap run) and the shikigami-build Pod Security exception, as for Thoth. Nothing runs in either namespace until the fence + deploy files land, so merge order doesn't matter. 🤖 Generated with Claude Code - https://claude.ai/code/session_01MdS1HcMerN6toVuLY5K4MR
MarioGLealP added 1 commit 2026-10-30 22:20:10 +00:00
feat: trust Shikigami's builds - its signing key and build-namespace exception 45b5de805a 
The key was made by Shikigami's own OnboardBuild workflow (bootstrap run 2026-10-30); its private half is in
apps/meru/shikigami-build/build. Also fixes the keys file's comment to that path shape.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01MdS1HcMerN6toVuLY5K4MR
MarioGLealP merged commit c76efa1904 into main 2026-10-30 22:24:10 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
MarioGLealP (Mario Leal)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Meru/kyverno#7