Merge pull request #246 from Engineering-Research-and-Development/hot…

…fix/cosign_new_version Hotfix/cosign new version
Engineering-Research-and-Development · Nov 16, 2023 · ee47ec2 · ee47ec2
2 parents abf950b + f5ac127
commit ee47ec2
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,6 +1,12 @@
 # Changelog
 All notable changes to this project will be documented in this file.
 
+## [1.14.6] - 2023-11-16
+
+### Changed
+
+ - cosign version upgrade with alpine image; must include --insecure-ignore-tlog flag
+
 ## [1.14.5] - 2023-10-30
 
 ### Changed

diff --git a/ci/docker/docker-compose-uc.yml b/ci/docker/docker-compose-uc.yml
@@ -60,7 +60,7 @@ services:
     expose:
       - "8180"
     volumes:
-      - ./uc-dataapp_resources_provider:/etc
+      - ./uc-dataapp_resources_provider:/config
       - uc_provider_data:/data
       - ./ecc_cert:/cert
 
@@ -150,7 +150,7 @@ services:
     expose:
       - "8280"
     volumes:
-      - ./uc-dataapp_resources_consumer:/etc
+      - ./uc-dataapp_resources_consumer:/config
       - uc_consumer_data:/data
       - ./ecc_cert:/cert
 

diff --git a/src/main/java/it/eng/idsa/businesslogic/configuration/CertificationCheck.java b/src/main/java/it/eng/idsa/businesslogic/configuration/CertificationCheck.java
@@ -38,7 +38,7 @@ public void checkIfVerionsIsCertified() {
 			String rootImageName = "rdlabengpa/ids_execution_core_container:v";
 			List<String> startCmdList = getStartCmdList();
 			List<String> cmdList = new ArrayList<String>(startCmdList);
-			cmdList.add("echo | cosign verify --key " + targetDirectory.resolve("trueconn.pub") + " " + rootImageName
+			cmdList.add("echo | cosign verify --insecure-ignore-tlog --key " + targetDirectory.resolve("trueconn.pub") + " " + rootImageName
 					+ buildProperties.getVersion());
 
 			String getCosignVerification = processExecutor.executeProcess(cmdList);