diff --git a/charts/ratify/templates/NOTES.txt b/charts/ratify/templates/NOTES.txt new file mode 100644 index 0000000000..d3ea524064 --- /dev/null +++ b/charts/ratify/templates/NOTES.txt @@ -0,0 +1,6 @@ +{{- if not (or .Values.notation.enabled .Values.cosign.enabled .Values.sbom.enabled .Values.vulnerabilityreport.enabled) }} +*********************************************************** +WARNING: All verifiers are disabled. +It's recommended that at least one is enabled for proper functionality. +*********************************************************** +{{- end }} \ No newline at end of file diff --git a/charts/ratify/templates/verifier.yaml b/charts/ratify/templates/verifier.yaml index 2c7556ab1e..8ac23e5d82 100644 --- a/charts/ratify/templates/verifier.yaml +++ b/charts/ratify/templates/verifier.yaml @@ -1,4 +1,5 @@ {{- $fullname := include "ratify.fullname" . -}} +{{- if .Values.notation.enabled }} apiVersion: config.ratify.deislabs.io/v1beta1 kind: Verifier metadata: @@ -37,6 +38,7 @@ spec: - ca:certs trustedIdentities: - "*" +{{- end }} --- {{- if .Values.cosign.enabled }} apiVersion: config.ratify.deislabs.io/v1beta1 diff --git a/charts/ratify/values.yaml b/charts/ratify/values.yaml index 7e501bc74f..f1206dc102 100644 --- a/charts/ratify/values.yaml +++ b/charts/ratify/values.yaml @@ -12,6 +12,9 @@ tolerations: [] notationCerts: [] cosignKeys: [] +notation: + enabled: true + cosign: enabled: true scopes: ["*"] # corresponds to a single trust policy