deploy(referrers): add public index configuration (#444)

Signed-off-by: Miguel Martinez Trivino <[email protected]>

Author: migmartri

deployment/chainloop/Chart.yaml

@@ -4,7 +4,7 @@ description: Chainloop is an open source software supply chain control plane, a
 
 type: application
 # Bump the patch (not minor, not major) version on each change in the Chart Source code
-version: 1.23.0
+version: 1.23.1
 # Do not update appVersion, this is handled automatically by the release process
 appVersion: v0.30.0
 

deployment/chainloop/README.md

@@ -439,13 +439,16 @@ chainloop config save \
 
 ### Control Plane
 
-| Name                                 | Description                                                                             | Value                                           |
-| ------------------------------------ | --------------------------------------------------------------------------------------- | ----------------------------------------------- |
-| `controlplane.replicaCount`          | Number of replicas                                                                      | `2`                                             |
-| `controlplane.image.repository`      | FQDN uri for the image                                                                  | `ghcr.io/chainloop-dev/chainloop/control-plane` |
-| `controlplane.image.tag`             | Image tag (immutable tags are recommended). If no set chart.appVersion will be used     |                                                 |
-| `controlplane.tlsConfig.secret.name` | name of a secret containing TLS certificate to be used by the controlplane grpc server. | `""`                                            |
-| `controlplane.pluginsDir`            | Directory where to look for plugins                                                     | `/plugins`                                      |
+| Name                                           | Description                                                                                     | Value                                           |
+| ---------------------------------------------- | ----------------------------------------------------------------------------------------------- | ----------------------------------------------- |
+| `controlplane.replicaCount`                    | Number of replicas                                                                              | `2`                                             |
+| `controlplane.image.repository`                | FQDN uri for the image                                                                          | `ghcr.io/chainloop-dev/chainloop/control-plane` |
+| `controlplane.image.tag`                       | Image tag (immutable tags are recommended). If no set chart.appVersion will be used             |                                                 |
+| `controlplane.tlsConfig.secret.name`           | name of a secret containing TLS certificate to be used by the controlplane grpc server.         | `""`                                            |
+| `controlplane.pluginsDir`                      | Directory where to look for plugins                                                             | `/plugins`                                      |
+| `controlplane.referrerSharedIndex`             | Configure the shared, public index API endpoint that can be used to discover metadata referrers |                                                 |
+| `controlplane.referrerSharedIndex.enabled`     | Enable index API endpoint                                                                       | `false`                                         |
+| `controlplane.referrerSharedIndex.allowedOrgs` | List of UUIDs of organizations that are allowed to publish to the shared index                  | `[]`                                            |
 
 ### Control Plane Database
 

deployment/chainloop/templates/controlplane/config.configmap.yaml

@@ -34,4 +34,6 @@ data:
         addr: {{ printf "%s-api:%.0f" (include "chainloop.cas.fullname" .) .Values.cas.serviceAPI.port }}
       insecure: true
       download_url: {{ include "chainloop.cas.external_url" . }}/download
-    plugins_dir: {{ .Values.controlplane.pluginsDir }}
+    plugins_dir: {{ .Values.controlplane.pluginsDir }}
+    referrer_shared_index:
+      {{- toYaml .Values.controlplane.referrerSharedIndex | nindent 6 }}

deployment/chainloop/values.yaml

@@ -114,6 +114,13 @@ controlplane:
   ## @param controlplane.pluginsDir Directory where to look for plugins
   pluginsDir: /plugins
 
+  ## @extra controlplane.referrerSharedIndex Configure the shared, public index API endpoint that can be used to discover metadata referrers
+  ## @param controlplane.referrerSharedIndex.enabled Enable index API endpoint
+  ## @param controlplane.referrerSharedIndex.allowedOrgs List of UUIDs of organizations that are allowed to publish to the shared index
+  referrerSharedIndex:
+    enabled: false
+    allowedOrgs: []
+
   # Database migration
   ## @skip controlplane.migration
   migration: