chris/OSVauco
1
0
Fork 0
Code Issues 1 Pull Requests Actions 2 Packages Projects Releases Wiki Activity

feat(tyr): complete binary authorization setup and update docs

Browse Source
This commit is contained in:
Chris Christiansen 2026-09-02 19:11:10 +00:00
parent b4027b6c85
commit 8eac8a912f
4 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
cosign.pub Normal file
View File

@ -0,0 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEk7BUor5+RImB5EiI7imet3Xwm4vj
j0Fg0sXKY8icZfinWr3hwyGwSGmd/vq22OLjIhlhChTp10xXzKIVZyzQAA==
-----END PUBLIC KEY-----

1
project/roadmap.md
View File

@ -9,6 +9,7 @@ This document tracks the high-level goals and future development milestones for
## Phase 1: TYR Service Identity (SPIFFE/SVID) ## Phase 1: TYR Service Identity (SPIFFE/SVID)
- [x] Deploy step-ca - [x] Deploy step-ca
- [x] Bootstrap SPIRE - [x] Bootstrap SPIRE
- [x] Establish Binary Authorization Infrastructure
## Phase 3: Memory Bank & Project Management ## Phase 3: Memory Bank & Project Management
- [x] Implement `read_memory_bank` and `write_memory_bank` MCP tools. - [x] Implement `read_memory_bank` and `write_memory_bank` MCP tools.

4
tyr/memory_bank/completed.md
View File

@ -7,3 +7,7 @@
- **Phase 1.2: Bootstrap SPIRE** - **Phase 1.2: Bootstrap SPIRE**
- Status: **Complete** - Status: **Complete**
- Notes: `install_spire.sh` executed and daemons are running. - Notes: `install_spire.sh` executed and daemons are running.
- **Phase 1.4: Binary Authorization**
- Status: **Complete**
- Notes: `cosign` installed, KMS key generated, and initial `binauthz.yaml` policy exported.

5
tyr/policy/binauthz.yaml Normal file
View File

@ -0,0 +1,5 @@
defaultAdmissionRule:
enforcementMode: ENFORCED_BLOCK_AND_AUDIT_LOG
evaluationMode: ALWAYS_ALLOW
globalPolicyEvaluationMode: ENABLE
name: projects/propane-will-491900-m5/policy