# flux_source_secret-ca-pem.yaml
---
apiVersion: v1
kind: Secret
metadata:
  name: notation-config
  namespace: my-namespace
stringData:
  ca.pem: ca-data-pem
  trustpolicy.json: |
    {
        "version": "1.0",
        "trustPolicies": [
            {
                "name": "fluxcd.io",
                "registryScopes": [
                    "*"
                ],
                "signatureVerification": {
                    "level" : "strict"
                },
                "trustStores": [ "ca:fluxcd.io" ],
                "trustedIdentities": [
                    "*"
                ]
            }
        ]
    }