Remove allow.pub as identity provider (#1757)

* Remove allow.pub as identity provider Currently offline and inactive. Spoke offline with maintainer, may add back at a later point Signed-off-by: Hayden B <[email protected]> * Remove from docs as well Signed-off-by: Hayden B <[email protected]> --------- Signed-off-by: Hayden B <[email protected]>
sigstore · Aug 8, 2024 · ccd120a · ccd120a
1 parent 50dbac4
commit ccd120a
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 10 deletions.
diff --git a/config/identity/config.yaml b/config/identity/config.yaml
@@ -31,13 +31,6 @@ oidc-issuers:
     ci-provider: *buildkite-type
     contact: [email protected]
     description: "Buildkite Agent OIDC tokens for job identity"
-  https://allow.pub:
-    issuer-url: https://allow.pub
-    client-id: sigstore
-    type: spiffe
-    spiffe-trust-domain: allow.pub
-    contact: [email protected]
-    description: "Server side signing support for the OCI registry vcr.pub"
   https://auth.eclipse.org/auth/realms/sigstore:
     issuer-url: https://auth.eclipse.org/auth/realms/sigstore
     client-id: sigstore

diff --git a/docs/oidc.md b/docs/oidc.md
@@ -149,8 +149,6 @@ GitHub supports OIDC tokens for its workflows initiated from GitHub Actions. Thi
 
 SPIFFE-based OIDC providers use a SPIFFE ID as the URI subject alternative name of the certificate, scoped to a domain.
 
-* vcr.pub OCI registry (`allow.pub`)
-
 ### Kubernetes
 
 Cloud-based Kubernetes instances can authenticate using OIDC tokens per cluster.
@@ -326,4 +324,4 @@ The token must include the following claims:
 }
 ```
 
-These claims are used to form the SAN URI of the certificate: `https://buildkite.com/acme-inc/super-duper-app`.
+These claims are used to form the SAN URI of the certificate: `https://buildkite.com/acme-inc/super-duper-app`.