chore: Migrate to sigstore repository

Signed-off-by: Jan Bouska <[email protected]>

Author: bouskaJ

PROJECT

@@ -9,14 +9,14 @@ plugins:
   manifests.sdk.operatorframework.io/v2: {}
   scorecard.sdk.operatorframework.io/v2: {}
 projectName: sdk-init
-repo: github.com/miyunari/model-validation-controller
+repo: github.com/sigstore/model-validation-operator
 resources:
 - api:
     crdVersion: v1
     namespaced: true
   domain: sigstore.dev
   group: ml
   kind: ModelValidation
-  path: github.com/miyunari/model-validation-controller/api/v1alpha1
+  path: github.com/sigstore/model-validation-controller/api/v1alpha1
   version: v1alpha1
 version: "3"

README.md

@@ -19,14 +19,14 @@ This project is a proof of concept based on the [sigstore/model-transperency-cli
 
 The controller can be installed in the `model-validation-controller` namespace via [kustomize](https://kustomize.io/).
 ```bash
-kubectl apply -k https://raw.githubusercontent.com/miyunari/model-validation-controller/main/manifests
+kubectl apply -k https://raw.githubusercontent.com/sigstore/model-validation-operator/main/manifests
 # or local
 kubectl apply -k manifests
 ```
 
 Run delete to uninstall the controller.
 ```bash
-kubectl delete -k https://raw.githubusercontent.com/miyunari/model-validation-controller/main/manifests
+kubectl delete -k https://raw.githubusercontent.com/sigstore/model-validation-operator/main/manifests
 # or local
 kubectl delete -k manifests
 ```
@@ -84,7 +84,7 @@ metadata:
 spec:
   config:
     sigstoreConfig:
-      certificateIdentity: "https://github.com/miyunari/model-validation-controller/.github/workflows/sign-model.yaml@refs/tags/v0.0.2"
+      certificateIdentity: "https://github.com/sigstore/model-validation-operator/.github/workflows/sign-model.yaml@refs/tags/v0.0.2"
       certificateOidcIssuer: "https://token.actions.githubusercontent.com"
   model:
     path: /data/tensorflow_saved_model
@@ -123,13 +123,13 @@ The example folder contains two files `prepare.yaml` and `signed.yaml`.
 
 - prepare: contains a persistent volume claim and a job that downloads a signed test model.
 ```bash
-kubectl apply -f https://raw.githubusercontent.com/miyunari/model-validation-controller/main/examples/prepare.yaml
+kubectl apply -f https://raw.githubusercontent.com/sigstore/model-validation-operator/main/examples/prepare.yaml
 # or local
 kubectl apply -f examples/prepare.yaml
 ```
 - signed: contains a model validation manifest for the validation of this model and a demo pod, which is provided with the appropriate label for validation.
 ```bash
-kubectl apply -f https://raw.githubusercontent.com/miyunari/model-validation-controller/main/examples/verify.yaml
+kubectl apply -f https://raw.githubusercontent.com/sigstore/model-validation-operator/main/examples/verify.yaml
 # or local
 kubectl apply -f examples/verify.yaml
 ```

cmd/main.go

@@ -25,7 +25,7 @@ import (
 	// to ensure that exec-entrypoint and run can make use of them.
 	_ "k8s.io/client-go/plugin/pkg/client/auth"
 
-	"github.com/miyunari/model-validation-controller/internal/webhooks"
+	"github.com/sigstore/model-validation-controller/internal/webhooks"
 	"k8s.io/apimachinery/pkg/runtime"
 	utilruntime "k8s.io/apimachinery/pkg/util/runtime"
 	clientgoscheme "k8s.io/client-go/kubernetes/scheme"
@@ -37,7 +37,7 @@ import (
 	"sigs.k8s.io/controller-runtime/pkg/webhook"
 	"sigs.k8s.io/controller-runtime/pkg/webhook/admission"
 
-	mlv1alpha1 "github.com/miyunari/model-validation-controller/api/v1alpha1"
+	mlv1alpha1 "github.com/sigstore/model-validation-controller/api/v1alpha1"
 	// +kubebuilder:scaffold:imports
 )
 

examples/prepare.yaml

@@ -24,7 +24,7 @@ spec:
             - /bin/sh
             - -c
             - |
-              wget -O /data/tensorflow_saved_model.tar.gz https://github.com/miyunari/model-validation-controller/releases/download/v0.0.1/signed_model.tar.gz
+              wget -O /data/tensorflow_saved_model.tar.gz https://github.com/sigstore/model-validation-operator/releases/download/v0.0.1/signed_model.tar.gz
               tar -xzvf /data/tensorflow_saved_model.tar.gz -C /data
               rm /data/tensorflow_saved_model.tar.gz
           volumeMounts:

examples/verify.yaml

@@ -12,7 +12,7 @@ spec:
     # privateKeyConfig:
     #   keyPath: /root/pub.key
     sigstoreConfig:
-      certificateIdentity: "https://github.com/miyunari/model-validation-controller/.github/workflows/sign-model.yaml@refs/tags/v0.0.2"
+      certificateIdentity: "https://github.com/sigstore/model-validation-operator/.github/workflows/sign-model.yaml@refs/tags/v0.0.2"
       certificateOidcIssuer: "https://token.actions.githubusercontent.com"
   model:
     path: /data

go.mod

@@ -1,4 +1,4 @@
-module github.com/miyunari/model-validation-controller
+module github.com/sigstore/model-validation-controller
 
 go 1.23.0
 

internal/constants/images.go

@@ -0,0 +1,3 @@
+package constants
+
+var ()

internal/webhooks/pod_webhook.go

@@ -13,7 +13,7 @@ import (
 	"sigs.k8s.io/controller-runtime/pkg/webhook/admission"
 
 	"github.com/go-logr/logr"
-	v1alpha1 "github.com/miyunari/model-validation-controller/api/v1alpha1"
+	"github.com/sigstore/model-validation-controller/api/v1alpha1"
 )
 
 // NewPodInterceptor creates a new pod mutating webhook to be registered

manifests/deployment.yaml

@@ -19,7 +19,7 @@ spec:
       serviceAccountName: model-validation-controller-sa
       containers:
       - name: model-validation-controller
-        image: ghcr.io/miyunari/model-validation-controller:v1.0.1
+        image: ghcr.io/sigstore/model-validation-controller:v1.0.1
         ports:
         - containerPort: 8080
         volumeMounts: