kbs: fix configs in kubernetes deployments

some of the mandatory TOML entries were not correctly updated to the kubernetes deployments. Follow ca9bf40 changes to update kbs/config/kubernetes TOML files too. Signed-off-by: Mikko Ylinen <[email protected]>
confidential-containers · Nov 15, 2024 · 4bc7aa3 · 4bc7aa3
1 parent 5f2f053
commit 4bc7aa3
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/kbs/config/kubernetes/base/kbs-config.toml b/kbs/config/kubernetes/base/kbs-config.toml
@@ -22,3 +22,8 @@ attestation_token_broker = "Simple"
 
 [admin]
 auth_public_key = "/kbs/kbs.pem"
+
+[[plugins]]
+name = "resource"
+type = "LocalFs"
+dir_path = "/opt/confidential-containers/kbs/repository"
diff --git a/kbs/config/kubernetes/ita/kbs-config.toml b/kbs/config/kubernetes/ita/kbs-config.toml
@@ -5,7 +5,7 @@ sockets = ["0.0.0.0:8080"]
 insecure_http = true
 
 [attestation_token]
-trusted_certs_paths = ["https://portal.trustauthority.intel.com"]
+trusted_jwk_sets = ["https://portal.trustauthority.intel.com"]
 
 [attestation_service]
 type = "intel_ta"
@@ -15,3 +15,8 @@ certs_file = "https://portal.trustauthority.intel.com"
 
 [admin]
 auth_public_key = "/kbs/kbs.pem"
+
+[[plugins]]
+name = "resource"
+type = "LocalFs"
+dir_path = "/opt/confidential-containers/kbs/repository"