Skip to content

Switch docker env from ct_server to TesseraCT#2210

Merged
Hayden-IO merged 1 commit into
sigstore:mainfrom
cmurphy:tesseract
Dec 1, 2025
Merged

Switch docker env from ct_server to TesseraCT#2210
Hayden-IO merged 1 commit into
sigstore:mainfrom
cmurphy:tesseract

Conversation

@cmurphy

@cmurphy cmurphy commented Nov 15, 2025

Copy link
Copy Markdown
Contributor

Relates to sigstore/rekor-tiles#73

Summary

Release Note

Documentation

@codecov

codecov Bot commented Nov 15, 2025

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 44.95%. Comparing base (cf238ac) to head (138b7cc).
⚠️ Report is 518 commits behind head on main.

Additional details and impacted files
@@             Coverage Diff             @@
##             main    #2210       +/-   ##
===========================================
- Coverage   57.93%   44.95%   -12.98%     
===========================================
  Files          50       72       +22     
  Lines        3119     4689     +1570     
===========================================
+ Hits         1807     2108      +301     
- Misses       1154     2344     +1190     
- Partials      158      237       +79     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@cmurphy cmurphy marked this pull request as ready for review November 17, 2025 20:55
@cmurphy cmurphy requested a review from a team as a code owner November 17, 2025 20:55

@Hayden-IO Hayden-IO left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks great!

I realized, quite surprisingly, we don't have an e2e test in this repo that uses a non-mocked CT log. Could we throw together a minimal one, something like spinning up the containers, making a request using either https://github.com/sigstore-conformance/extremely-dangerous-public-oidc-beacon/ or a fake OIDC provider, and verifying the certificate and its SCT?

Comment thread docker-compose.yml
- ctStorage:/ctfe:z
- ./config/ctfe/:/etc/ctfe:ro
- ./config/fulcio-root:/etc/fulcio:ro
user: root

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit, is this needed, I thought root was the default user?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For some reason I needed it when I switched to the ko scaffolding image, maybe ko is non-root by default.

@cmurphy

cmurphy commented Nov 25, 2025

Copy link
Copy Markdown
Contributor Author

I added #2230 to demonstrate working E2E tests with no changes , then based this PR on that commit.

@Hayden-IO Hayden-IO left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great, thanks for adding the tests! Just needs a rebase

Signed-off-by: Colleen Murphy <colleenmurphy@google.com>
@Hayden-IO Hayden-IO enabled auto-merge (squash) December 1, 2025 18:09
@Hayden-IO Hayden-IO merged commit 4ed0ea1 into sigstore:main Dec 1, 2025
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants