move to yaml

Signed-off-by: Javan lacerda <javanlacerda@google.com>
sigstore · Jul 10, 2024 · 5913bdc · 5913bdc
1 parent 10c7da8
commit 5913bdc
Showing 1 changed file with 10 additions and 16 deletions.
diff --git a/.github/workflows/verify-k8s.yml b/.github/workflows/verify-k8s.yml
@@ -45,18 +45,6 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false # Keep running if one leg fails.
-      matrix:
-        issuer:
-        - "OIDC Issuer"
-        - "Meta Issuer"
-
-        include:
-        - issuer: "OIDC Issuer"
-          issuer-config: |
-            "OIDCIssuers": {"https://kubernetes.default.svc": {"IssuerURL": "https://kubernetes.default.svc","ClientID": "sigstore","Type": "kubernetes"}}
-        - issuer: "Meta Issuer"
-          issuer-config: |
-            "MetaIssuers": {"https://kubernetes.*.svc": {"ClientID": "sigstore","Type": "kubernetes"}}
     env:
       # https://github.com/google/go-containerregistry/pull/125 allows insecure registry for
       # '*.local' hostnames. This works both for `ko` and our own tag-to-digest resolution logic,
@@ -123,10 +111,16 @@ jobs:
             name: fulcio-config
             namespace: fulcio-system
           data:
-            config.json: |-
-              {
-                ${{ matrix.issuer-config }}
-              }
+            config.yaml: |-
+              oidc-issuers:
+                https://kubernetes.default.svc:
+                  issuer-url: "https://kubernetes.default.svc"
+                  client-id: "sigstore"
+                  Type: "kubernetes"
+              meta-issuers:
+                https://kubernetes.*.svc: 
+                  client-id: "sigstore"
+                  type: "kubernetes"
             server.yaml: |-
               host: 0.0.0.0
               port: 5555