auth

Documentation

Index

• Constants
• func BuildEnvVar(keychain authn.Keychain, images ...string) (string, error)
• func DefaultKeychain(images ...string) (authn.Keychain, error)
• func NewEnvKeychain(envVar string) (authn.Keychain, error)
• func NewResolvedKeychain(keychain authn.Keychain, images ...string) authn.Keychain
• func ReadEnvVar(envVar string) (map[string]string, error)
• func ReferenceForRepoName(keychain authn.Keychain, ref string) (name.Reference, authn.Authenticator, error)
• type EnvKeychain
  • func (k *EnvKeychain) Resolve(resource authn.Resource) (authn.Authenticator, error)
• type ResolvedKeychain
  • func (k *ResolvedKeychain) Resolve(resource authn.Resource) (authn.Authenticator, error)

Constants

const EnvRegistryAuth = "CNB_REGISTRY_AUTH"

Functions

func BuildEnvVar

func BuildEnvVar(keychain authn.Keychain, images ...string) (string, error)

BuildEnvVar creates the contents to use for authentication environment variable.

Complementary to `ReadEnvVar`.

func DefaultKeychain

func DefaultKeychain(images ...string) (authn.Keychain, error)

DefaultKeychain returns a keychain containing authentication configuration for the given images from the following sources, if they exist, in order of precedence: the provided environment variable the docker config.json file credential helpers for Amazon and Azure

func NewEnvKeychain

func NewEnvKeychain(envVar string) (authn.Keychain, error)

NewEnvKeychain returns an authn.Keychain that uses the provided environment variable as a source of credentials. The value of the environment variable should be a JSON object that maps OCI registry hostnames to Authorization headers.

func NewResolvedKeychain

func NewResolvedKeychain(keychain authn.Keychain, images ...string) authn.Keychain

NewResolvedKeychain resolves credentials for the given images from the given keychain and returns a new keychain that stores the pre-resolved credentials in memory and returns them on demand. This is useful in cases where the backing credential store may become inaccessible in the future.

func ReadEnvVar

func ReadEnvVar(envVar string) (map[string]string, error)

ReadEnvVar parses an environment variable to produce a map of 'registry url' to 'authorization header'.

Complementary to `BuildEnvVar`.

Example Input:

{"gcr.io": "Bearer asdf=", "docker.io": "Basic qwerty="}

Example Output:

gcr.io -> Bearer asdf=
docker.io -> Basic qwerty=

func ReferenceForRepoName

func ReferenceForRepoName(keychain authn.Keychain, ref string) (name.Reference, authn.Authenticator, error)

ReferenceForRepoName returns a reference and an authenticator for a given image name and keychain.

Types

type EnvKeychain

type EnvKeychain struct {
	AuthHeaders map[string]string
}

EnvKeychain is an implementation of authn.Keychain that stores credentials as auth headers.

func (*EnvKeychain) Resolve

func (k *EnvKeychain) Resolve(resource authn.Resource) (authn.Authenticator, error)

type ResolvedKeychain

type ResolvedKeychain struct {
	AuthConfigs map[string]*authn.AuthConfig
}

ResolvedKeychain is an implementation of authn.Keychain that stores credentials in memory.

func (*ResolvedKeychain) Resolve

func (k *ResolvedKeychain) Resolve(resource authn.Resource) (authn.Authenticator, error)