Remove timestamping authority

See sigstore#812 for more discussion. Signed-off-by: Hayden Blauzvern <[email protected]>
haydentherapper · May 13, 2022 · 49fe015 · 49fe015
1 parent 2978cdc
commit 49fe015
Show file tree

Hide file tree

Showing 35 changed files with 24 additions and 3,226 deletions.
diff --git a/CODEOWNERS b/CODEOWNERS
@@ -5,9 +5,6 @@
 
 /pkg/types/		@bobcallaway
 
-/pkg/api/timestamp.go	@asraa @loosebazooka
-/pkg/types/rfc3161/	@asraa @loosebazooka
-
 # The CODEOWNERS are managed via a GitHub team, but the current list is (in alphabetical order):
 
 # asraa

diff --git a/FEATURES.md b/FEATURES.md
@@ -7,7 +7,6 @@ This doc covers feature stability in `rekor` as described in the [API Stability
 
 ## Beta
 * Rekor API, defined [here](https://github.com/sigstore/rekor/blob/main/openapi.yaml)
-* The Rekor RFC 3161 timestamping service
 * `rekor-cli` CLI tool
 * The `rekor/pkg/client` client library
 

diff --git a/cmd/rekor-cli/app/timestamp.go b/cmd/rekor-cli/app/timestamp.go
diff --git a/cmd/rekor-cli/app/timestamp_test.go b/cmd/rekor-cli/app/timestamp_test.go
diff --git a/cmd/rekor-server/app/root.go b/cmd/rekor-server/app/root.go
@@ -69,7 +69,6 @@ func init() {
 	rootCmd.PersistentFlags().String("rekor_server.hostname", "rekor.sigstore.dev", "public hostname of instance")
 	rootCmd.PersistentFlags().String("rekor_server.address", "127.0.0.1", "Address to bind to")
 	rootCmd.PersistentFlags().String("rekor_server.signer", "memory", "Rekor signer to use. Current valid options include: [gcpkms, memory]")
-	rootCmd.PersistentFlags().String("rekor_server.timestamp_chain", "", "PEM encoded cert chain signing authorizing the signer to be a CA to sign a timestamping cert")
 
 	rootCmd.PersistentFlags().Uint16("port", 3000, "Port to bind to")
 

diff --git a/config/rekor.yaml b/config/rekor.yaml
@@ -59,8 +59,7 @@ spec:
           "--rekor_server.signer=$(KMS)",
           "--trillian_log_server.sharding_config=/sharding/sharding-config.yaml",
           "--enable_attestation_storage=$(ENABLE_ATTESTATION_STORAGE)",
-          "--attestation_storage_bucket=$(ATTESTATION_BUCKET)",
-          "--rekor_server.timestamp_chain=$(TIMESTAMP_CHAIN)"
+          "--attestation_storage_bucket=$(ATTESTATION_BUCKET)"
         ]
         volumeMounts:
         - name: sharding-config
@@ -81,11 +80,6 @@ spec:
             configMapKeyRef:
               name: rekor-config
               key: attestation_bucket
-        - name: TIMESTAMP_CHAIN
-          valueFrom:
-            configMapKeyRef:
-              name: rekor-config
-              key: timestamp_chain
         resources:
           requests:
             memory: "1G"