remove TUF initialization from main (#4098)

Signed-off-by: Jim Bugwadia <jim@nirmata.com>

cmd/kyverno/main.go

@@ -404,11 +404,6 @@ func main() {
 	// the webhook server runs across all instances
 	openAPIController := startOpenAPIController(dynamicClient, stopCh)
 
-	if err := cosign.Init(); err != nil {
-		setupLog.Error(err, "initialization failed")
-		os.Exit(1)
-	}
-
 	// WEBHOOK
 	// - https server to provide endpoints called based on rules defined in Mutating & Validation webhook configuration
 	// - reports the results based on the response from the policy engine:

pkg/cosign/cosign.go

@@ -181,6 +181,9 @@ func buildCosignOptions(opts Options) (*cosign.CheckOpts, error) {
 			// if key, cert, and roots are not provided, default to Fulcio roots
 			if cosignOpts.RootCerts == nil {
 				cosignOpts.RootCerts = fulcio.GetRoots()
+				if cosignOpts.RootCerts == nil {
+					return nil, fmt.Errorf("failed to initialize roots")
+				}
 			}
 		}
 	}

pkg/cosign/init.go

@@ -1,14 +0,0 @@
-package cosign
-
-import (
-	"fmt"
-
-	"github.com/sigstore/cosign/cmd/cosign/cli/fulcio"
-)
-
-func Init() error {
-	if fulcio.GetRoots() == nil {
-		return fmt.Errorf("failed to initialize Fulcio roots")
-	}
-	return nil
-}