From 92af3b3a2cc38b8ee600f1d28aff8698c143164a Mon Sep 17 00:00:00 2001
From: Gregory Giguashvili <ggiguash@redhat.com>
Date: Fri, 20 Mar 2026 09:02:36 +0200
Subject: [PATCH] Add cert-manager and kserve sigstore exceptions

---
 .../includes/post-containers-sigstore.cfg                   | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/test/kickstart-templates/includes/post-containers-sigstore.cfg b/test/kickstart-templates/includes/post-containers-sigstore.cfg
index 5cb9091898..7e74dcf7a6 100644
--- a/test/kickstart-templates/includes/post-containers-sigstore.cfg
+++ b/test/kickstart-templates/includes/post-containers-sigstore.cfg
@@ -43,9 +43,15 @@ cat > /etc/containers/policy.json <<'EOF'
             "registry.redhat.io/cert-manager/cert-manager-operator-rhel9": [{
                 "type": "insecureAcceptAnything"
             }],
+            "registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9": [{
+                "type": "insecureAcceptAnything"
+            }],
             "quay.io/modh/kserve-controller": [{
                 "type": "insecureAcceptAnything"
             }],
+            "quay.io/opendatahub/kserve-controller": [{
+                "type": "insecureAcceptAnything"
+            }],
             "registry.redhat.io/openshift4/ose-kube-rbac-proxy": [{
                 "type": "insecureAcceptAnything"
             }],