load("//hack/build/rules/container/sign:keys/gcp_kms.bzl", "gcp_kms_key")

package(default_visibility = ["//visibility:public"])

exports_files([
    "sign.sh.tpl",
])

gcp_kms_key(
    name = "f8n-cosign-key",
    key = "cosign-generated",
    keyring = "f8n-gang-signing-key",
    location = "global",
    project = "ret-edge-f8ngang2",
)

gcp_kms_key(
    name = "sign-dev",
    key = "sign-dev",
    keyring = "signing-keyring",
    location = "us-east1",
    project = "ret-edge-pltf-infra",
)

gcp_kms_key(
    name = "sign-staging",
    key = "sign-staging",
    keyring = "signing-keyring",
    location = "us-east1",
    project = "ret-edge-pltf-infra",
)

gcp_kms_key(
    name = "sign-prod",
    key = "sign-prod",
    keyring = "signing-keyring",
    location = "us-east1",
    project = "ret-edge-pltf-infra",
)

label_flag(
    name = "gcp_kms_key",
    build_setting_default = ":sign-dev",
)