Should staging Fulcio support a permissive OIDC IdP? about fulcio HOT 2 CLOSED

This doesn't solve the issue for the conformance suite since it would still want to run against production, correct? Unless they're ok with some instability brought on by staging (it is rarely down, but there is a higher risk and no SLO). Long term, I would love more environments, each with their own root of trust of course:

• Staging would be bleeding edge with deployments from HEAD
• Preprod would be like current staging where we'd stage production releases
• Prod-qual would match the production environment but explicitly be for testing, and in this environment, we could have a more permissive IDP

from fulcio.

Closing this out, I think the solution here is more environments, which we aren't set up for at this point.

from fulcio.