Helm deployment of Ratify needs to be updated in docs , scripts and configuration with Gatekeeper

[suganyas]

The latest Ratify required the tls certificates to set while doing helm install - Refer - https://github.com/deislabs/ratify . It would throw an error without that with latest helm chart updates - https://github.com/deislabs/ratify/blob/c1bbd9aa5711398de70956026048b5ad9c1afcb7/charts/ratify/templates/provider.yaml#L8

PR for changes in Ratify: https://github.com/deislabs/ratify/pull/523/files

I have created a patch to update the scripts. But please note that while using default script (https://raw.githubusercontent.com/deislabs/ratify/main/scripts/generate-tls-certs.sh)
for generating the certificates it defaults to 1 day which needs to be customised accordingly.

Please find attached files for reference and reach out for any further details.
ratify.patch

This patch does not have sample changes for bicep file in https://github.com/Azure/notation-azure-kv/blob/main/iac/notary/modules/configure/main.tf#L80 which also required update.

[binbin-li]

Hi @suganyas, Ratify has introduced a feature flag: RATIFY_CERT_ROTATION, which could auto rotate the tls certs without providing it manually.

You could follow the ratify doc to install latest version with this feature on.