add stepsecurity manifests

stepsecurity/Makefile

@@ -0,0 +1,7 @@
+.PHONY: gen-yaml
+gen-yaml:
+	docker run -ti --rm \
+	  -v $${PWD}:/opt/manifests \
+	  --workdir=/opt/manifests \
+	  --entrypoint=/bin/sh \
+	  alpine/helm ./gen-yaml

stepsecurity/arc_harden_runner_values.yaml

@@ -0,0 +1,11 @@
+env:
+  customer: "utilitywarehouse"
+  apiKey: "step_api_key_change_me"
+  clusterName: "[CLUSTER_NAME]"
+  arcRunnerNameSpaces:
+    - sys-actions
+tetragon:
+  resources:
+    requests:
+      cpu: "1"
+      memory: "1024Mi"

stepsecurity/gen-yaml

@@ -0,0 +1,11 @@
+#!/bin/sh
+
+
+# Generate manifests 
+STEP_SECURITY_VERSION="2.16.0"
+helm repo add stepsecurity https://helm.stepsecurity.io/arc-harden-runner
+helm repo update
+helm template  arc-harden-runner stepsecurity/arc-harden-runner \
+  -n sys-actions \
+  --version "${STEP_SECURITY_VERSION}" \
+  -f arc_harden_runner_values.yaml > upstream.yaml