7.12. 创建信任配置映射

流程

1. 创建 kbs-config-cm.yaml 清单文件：

   apiVersion: v1
   kind: ConfigMap
   metadata:
     name: kbs-config-cm
     namespace: trustee-operator-system
   data:
     kbs-config.toml: |
       [http_server]
       sockets = ["0.0.0.0:8080"]
       insecure_http = true
   
       [admin]
       insecure_api = true
       auth_public_key = "/etc/auth-secret/publicKey"
   
       [attestation_token]
       insecure_key = true
       attestation_token_type = "CoCo"
   
       [attestation_service]
       type = "coco_as_builtin"
       work_dir = "/opt/confidential-containers/attestation-service"
       policy_engine = "opa"
   
         [attestation_service.attestation_token_broker]
         type = "Ear"
         policy_dir = "/opt/confidential-containers/attestation-service/policies"
   
         [attestation_service.attestation_token_config]
         duration_min = 5
   
         [attestation_service.rvps_config]
         type = "BuiltIn"
   
           [attestation_service.rvps_config.storage]
           type = "LocalJson"
           file_path = "/opt/confidential-containers/rvps/reference-values/reference-values.json"
   
       [[plugins]]
       name = "resource"
       type = "LocalFs"
       dir_path = "/opt/confidential-containers/kbs/repository"
   
       [policy_engine]
       policy_path = "/opt/confidential-containers/opa/policy.rego"

   Copy to Clipboard Toggle word wrap

2. 运行以下命令来创建配置映射：

   $ oc apply -f kbs-config-cm.yaml

   Copy to Clipboard Toggle word wrap