[roll] Roll fuchsia [security] Route Google trust store to Cobalt

Apply the TLS trust store restriction to the Cobalt metrics system.

Route the Google-restricted HTTP client (GoogleLoader) to the #cobalt
component, aliasing it back as standard Loader. Also route the
google-root-ssl-certificates directory to #cobalt as
root-ssl-certificates. This forces Cobalt to connect only via the
Google trust store, protecting metrics uploads from commercial CA
compromise.

Original-Original-Bug: 536132993
Test: build only (tested in chain)
TAG: agy
CONV: 1aa99c49-1c91-4972-ab3c-0bc81f54c209
Original-Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1731091
Original-Original-Revision: beed0b823c294bbbbb0be9aca8e450b065b4b23b
GitOrigin-RevId: ee76e0f1fb76e86047a39975b41bacd2f4f46cb7
Change-Id: I1f93e7913010e8f80db69a3cbd671198e507f2e2
1 file changed
tree: e4fa859a6172e3e9e2adb812ffe0dcdfdb2a5a3a
  1. ctf/
  2. git-hooks/
  3. infra/
  4. third_party/
  5. cobalt
  6. flower
  7. jiri.lock
  8. MILESTONE
  9. minimal
  10. prebuilts
  11. README.md
  12. stem
  13. test_durations
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.