From 710784c49e106931766456e83949d64ba4eaa911 Mon Sep 17 00:00:00 2001
From: asraa <asraa@google.com>
Date: Wed, 23 Jun 2021 16:05:02 -0400
Subject: [PATCH] Add timestamping cert chain to config (#338)

Signed-off-by: Asra Ali <asraa@google.com>
---
 config/rekor.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/config/rekor.yaml b/config/rekor.yaml
index 664341a57..ed700364d 100644
--- a/config/rekor.yaml
+++ b/config/rekor.yaml
@@ -50,7 +50,8 @@ spec:
           "--log_type=prod",
           "--rekor_server.signer=$(KMS)",
           "--enable_attestation_storage=$(ENABLE_ATTESTATION_STORAGE)",
-          "--attestation_storage_bucket=$(ATTESTATION_BUCKET)"
+          "--attestation_storage_bucket=$(ATTESTATION_BUCKET)",
+          "--rekor_server.timestamp_chain=$(TIMESTAMP_CHAIN)"
         ]
         env:
         - name: KMS
@@ -68,6 +69,11 @@ spec:
             configMapKeyRef:
               name: rekor-config
               key: attestation_bucket
+        - name: TIMESTAMP_CHAIN
+          valueFrom:
+            configMapKeyRef:
+              name: rekor-config
+              key: timestamp_chain
         resources:
           requests:
             memory: "1G"