repository-service-tuf/repository-service-tuf-worker

Task: Implement Metadata Update Distributed Async Signature feature

kairoaraujo opened this issue · 2 comments

What is the task about?

This task is about the Worker running tasks for Signing a TUF metadata.

It requires:

  • #300, which implements the base sign_metadata

Required changes:

  • Metadata Update
    • It does need to check the signing state (threshold) like in Bootstrap and update TUF Settings (Redis <ROLENAME>_SIGNING) and persist the metadata.
    • It is important to validate the signatures threshold of the previous and new metadata to have consistency. Specification reference.

Note: RSTUF currently has only one Role with offline key(s), but this process might be helpful in the future to support other offline roles or even support delegate roles using offline keys.

Parent feature

References

Code of Conduct

  • I agree to follow this project's Code of Conduct

We should be able to close this issue, right @lukpueh and @kairoaraujo?

Closing as we all agree we have achieved this issue.