ignore tlog when using RFC3161Timestamp (#1874)

* ignore tlog when using RFC3161Timestamp

Signed-off-by: jkylekelly <[email protected]>

* update wantCheckOpts for test

Signed-off-by: jkylekelly <[email protected]>

---------

Signed-off-by: jkylekelly <[email protected]>

Author: jkylekelly

pkg/webhook/validator.go

@@ -1405,6 +1405,7 @@ func checkOptsFromAuthority(ctx context.Context, authority webhookcip.Authority,
 				return nil, fmt.Errorf("when using the new bundle format, the trustRootRef for the TSA must be the same as the trustRootRef for the Keyless authority")
 			}
 			ret.UseSignedTimestamps = true
+			ret.IgnoreTlog = true
 		}
 
 		// Check for custom Rekor

pkg/webhook/validator_test.go

@@ -3428,6 +3428,7 @@ func TestCheckOptsFromAuthority(t *testing.T) {
 			NewBundleFormat:     true,
 			UseSignedTimestamps: true,
 			TrustedMaterial:     &root.TrustedRoot{},
+			IgnoreTlog:          true,
 		},
 	}, {
 		name: "bundle format, bad TrustRootRef",