Trying to reverse engineer the script setup.sh to understand how to use this plugin, I discovered mutiple commands wrong.
-
notation key remove should be notation key delete
-
notation cert remove should be notation cert delete
-
notation key add --name $keyName --plugin azure-kv --id $keyID --kms should be notation key add --plugin azure-kv --id $keyID $keyName
-
notation cert add --name $keyName --plugin azure-kv --id $keyID --kms is not usable at all... The cert should be a local PEM imported.
Could eventualy be :
az keyvault certificate download --encoding PEM --name $keyName --vault-name $keyVaultName --file tmpcert.pem
notation cert add --store test --type signingAuthority tmpcert.pem
Trying to reverse engineer the script setup.sh to understand how to use this plugin, I discovered mutiple commands wrong.
notation key removeshould benotation key deletenotation cert removeshould benotation cert deletenotation key add --name $keyName --plugin azure-kv --id $keyID --kmsshould benotation key add --plugin azure-kv --id $keyID $keyNamenotation cert add --name $keyName --plugin azure-kv --id $keyID --kmsis not usable at all... The cert should be a local PEM imported.Could eventualy be :