-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathproject.yaml
More file actions
122 lines (94 loc) · 5.85 KB
/
Copy pathproject.yaml
File metadata and controls
122 lines (94 loc) · 5.85 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
---
metadata:
name: cic-mcp-shared
description: Schema Compiler & Signing Infrastructure Template
version: 0.7.3
license: CC-BY-NC-SA-4.0
main_branch: main
owner: Gabor Zoltan Sinko
tags:
- template
- base-repo
validatedBy:
name: TBD
version: TBD
checksum: TBD
createdBy:
name: Gabor Zoltan Sinko
email: sgz@centralinfracore.hu
certificate: "Certificate:\n Data:\n Version: 3 (0x2)\n Serial\
\ Number: 4097 (0x1001)\n Signature Algorithm: ecdsa-with-SHA256\n \
\ Issuer: C=HU, O=CentralInfraCore, CN=CIC Root CA\n Validity\n\
\ Not Before: Oct 10 20:23:22 2025 GMT\n Not After : Oct\
\ 5 20:23:22 2026 GMT\n Subject: C=HU, O=CentralInfraCore, CN=Gabor\
\ Zoltan Sinko\n Subject Public Key Info:\n Public Key Algorithm:\
\ id-ecPublicKey\n Public-Key: (256 bit)\n pub:\n\
\ 04:e8:75:85:c9:5e:cd:2e:fe:b2:b3:dd:4d:2e:b5:\n \
\ 7a:d6:c0:de:5b:77:68:ea:ad:6f:f9:c6:12:b1:e5:\n \
\ 5b:a2:07:08:54:e0:77:24:33:5f:c6:4a:8a:8d:c4:\n 99:8c:cd:68:14:23:00:80:26:43:d5:ff:f6:96:b3:\n\
\ 8d:de:b9:6a:56\n ASN1 OID: prime256v1\n\
\ NIST CURVE: P-256\n X509v3 extensions:\n \
\ X509v3 Basic Constraints: \n CA:FALSE\n X509v3 Subject\
\ Key Identifier: \n 18:2B:65:8D:21:54:18:D0:14:DD:15:8D:DB:A7:D3:6A:A4:B3:61:0C\n\
\ X509v3 Authority Key Identifier: \n 04:AF:7A:55:90:FB:06:56:DD:89:34:F4:1B:B9:37:0A:2C:47:41:09\n\
\ X509v3 Subject Alternative Name: \n email:sgz@centralinfracore.hu\n\
\ X509v3 Key Usage: \n Digital Signature, Key Encipherment\n\
\ X509v3 Extended Key Usage: \n TLS Web Client Authentication\n\
\ Signature Algorithm: ecdsa-with-SHA256\n Signature Value:\n 30:44:02:20:50:3a:73:e6:dc:89:a5:63:c4:82:00:ff:18:8c:\n\
\ 6e:dd:1f:9d:2b:ac:36:24:db:9d:e9:4b:67:53:12:d7:f8:90:\n 02:20:21:18:37:fe:3e:6c:54:c2:28:6b:f1:1b:44:6e:93:b8:\n\
\ a0:b4:f7:8b:42:4d:d5:48:22:af:83:da:5f:0b:2b:16\n-----BEGIN CERTIFICATE-----\n\
MIICBzCCAa6gAwIBAgICEAEwCgYIKoZIzj0EAwIwPjELMAkGA1UEBhMCSFUxGTAX\nBgNVBAoMEENlbnRyYWxJbmZyYUNvcmUxFDASBgNVBAMMC0NJQyBSb290IENBMB4X\n\
DTI1MTAxMDIwMjMyMloXDTI2MTAwNTIwMjMyMlowRTELMAkGA1UEBhMCSFUxGTAX\nBgNVBAoMEENlbnRyYWxJbmZyYUNvcmUxGzAZBgNVBAMMEkdhYm9yIFpvbHRhbiBT\n\
aW5rbzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABOh1hclezS7+srPdTS61etbA\n3lt3aOqtb/nGErHlW6IHCFTgdyQzX8ZKio3EmYzNaBQjAIAmQ9X/9pazjd65alaj\n\
gZQwgZEwCQYDVR0TBAIwADAdBgNVHQ4EFgQUGCtljSFUGNAU3RWN26fTaqSzYQww\nHwYDVR0jBBgwFoAUBK96VZD7BlbdiTT0G7k3CixHQQkwIgYDVR0RBBswGYEXc2d6\n\
QGNlbnRyYWxpbmfrore.huwCwYDVR0PBAQDAgWgMBMGA1UdJQQMMAoGCCsG\nAQUFBwMCMAoGCCqGSM49BAMCA0cAMEQCIFA6c+bciaVjxIIA/xiMbt0fnSusNiTb\n\
nelLZ1MS1/iQAiAhGDf+PmxUwihr8RtEbpO4oLT3i0JN1Ugir4PaXwsrFg==\n-----END CERTIFICATE-----\n"
issuer_certificate: '-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
'
build_timestamp: '2025-12-08T17:09:32.315677+00:00'
validity:
from: '2025-12-08T17:09:32.315692+00:00'
until: '2026-12-08T17:09:32.315693+00:00'
checksum: HsAKF5g3ZB530cJk2qYTMzC7p2TMbzthg2Dn60h8DNQ=
sign: vault:v1:MEQCIG7JuRrA3Law8Q2oUe1GYV7SSbRvFT3ZvNvUnw2BB8xLAiBbfsf9CV1Q94KrBkyn3i72FLQG7LogZytuXytu7nqEAQ==
buildHash: vault:v1:MEQCIG7JuRrA3Law8Q2oUe1GYV7SSbRvFT3ZvNvUnw2BB8xLAiBbfsf9CV1Q94KrBkyn3i72FLQG7LogZytuXytu7nqEAQ==
cicSign: 'MEYCIQCTlJHjw0tx/UN7sNCzeYmwoQm4RhfkC6h0dmJt9avkxgIhANozYLu1P6eylXiwYOkR5LU9koKypeGbUkEsEMurnKXl'
cicSignedCA:
certificate: '-----BEGIN CERTIFICATE-----
MIICPDCCAeOgAwIBAgIUCuXu5zvoytWl7tbouWpFcu47FVUwCgYIKoZIzj0EAwIw
PjELMAkGA1UEBhMCSFUxGTAXBgNVBAoMEENlbnRyYWxJbmZyYUNvcmUxFDASBgNV
BAMMC0NJQyBSb290IENBMB4XDTI1MDgwNjA2MDUwMloXDTI2MDgwNjA2MDUwMlow
PjELMAkGA1UEBhMCSFUxGTAXBgNVBAoMEENlbnRyYWxJbmZyYUNvcmUxFDASBgNV
BAMMC0NJQyBSb290IENBMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEFHIGqGtI
3yPXQtoGpWXpO3xDcKvSvgORxxO9N0bD6okADsTk2/3Wl1PeUEcy7uRRSBAwBHoA
i1gt2iHCt57W3KOBvjCBuzAdBgNVHQ4EFgQUBK96VZD7BlbdiTT0G7k3CixHQQkw
eQYDVR0jBHIwcIAUBK96VZD7BlbdiTT0G7k3CixHQQmhQqRAMD4xCzAJBgNVBAYT
AkhVMRkwFwYDVQQKDBBDZW50cmFsSW5mcmFDb3JlMRQwEgYDVQQDDAtDSUMgUm9v
dCBDQYIUCuXu5zvoytWl7tbouWpFcu47FVUwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
HQ8BAf8EBAMCAYYwCgYIKoZIzj0EAwIDRwAwRAIgJ7gfxb3oddHx1u8CBA/t5QQM
av7F6hkOBwVfKA/ErA4CIAZIx2CSJde1c4guvORJCj8qXiJJFNeMBS7Gvq1+r0hG
-----END CERTIFICATE-----
'
compiler_settings:
component_name: base
meta_schemas_dir: ./
meta_schema_file: md.meta.schema.yaml
vault_key_name: cic-my-sign-key
cic_root_ca_key_name: cic-root-ca-key
source_dir: ./
vault_cert_mount: cic-my-sign-key
vault_cert_secret_name: crt
vault_cert_secret_key: bar