test

[puerco]

flowchart TB
  subgraph krel["<h2>krel</h2>"]
    direction TB
    style krel fill:#eee,stroke:#ccc,stroke-width:2px,font-weight:bold,font-size:120%

    subgraph staging["<h3>staging</h3>"]
      s1[build]-->s2["sign container images"]
    end
    subgraph promotion["<h3>image promotion</h3>"]
      ip1["k8s-org signature"]-->ip2
      ip2["signature replication"]
    end
    subgraph release["<h3>release</h3>"]
      r1["check image signatures"]-->r2["release"]
    end
    staging-->promotion
    promotion-->release
end

Loading

flowchart TB
  subgraph krel["<h2>krel</h2>"]
    direction TB
    style krel fill:#eee,stroke:#ccc,stroke-width:2px,font-weight:bold,font-size:120%
    style fpromotion fill:#eee,stroke:#ccc,color:ddd,stroke-width:2px,font-weight:bold,font-size:120%
    style a fill:#ccccff,stroke:#ccc,color:ccc,stroke-width:2px,font-weight:bold,font-size:120%
    style fp1 fill:#eee,stroke:#ccc,color:ccc,stroke-width:2px,font-weight:bold,font-size:120%

    subgraph staging["<h3>staging</h3>"]
      s1[build]-->s2["stage images and files"]
    end
    subgraph signing["<h3>signing</h3>"]
      sign1['read staging SBOM']
      sign1-->sign2["sign files"]
      sign1-->sign3["sign images"]
    end
    subgraph ipromotion["<h3>image promotion</h3>"]
      ip1["k8s-org signature"]-->ip2
      ip2["signature replication"]
    end
    subgraph fpromotion["<h3>file promotion</h3><br>(in an indeterminate future)"]
      a["File promotion is out of scope<br>for now but this is<br>where we should fit it"]
      fp1["k8s-org signature on files"]
    end
    subgraph release["<h3>release</h3>"]
      r1["check image signatures"]
      r2["check file signatures"]
      r1 & r2 --> r3["release"]
    end
    staging-->signing
    signing-->ipromotion
    signing-->fpromotion
    ipromotion & fpromotion -->release
end

Loading