registry

Documentation

Index

• func AuthAdaptHelper(auth authn.Authenticator) (registry.LoginOption, error)
• func ClientGenerator(tlsConfig *tls.Config, isLogin, insecureHTTP bool) (*registry.Client, string, error)
• func KeychainAdaptHelper(keyChain authn.Keychain) func(string) (registry.LoginOption, error)
• func LoginOptionFromSecret(registryURL string, secret corev1.Secret) (authn.Keychain, error)
• func NewLoginOption(auth authn.Authenticator, keychain authn.Keychain, registryURL string) (registry.LoginOption, error)
• func TLSLoginOption(certFile, keyFile, caFile string) registry.LoginOption

Functions

func AuthAdaptHelper

func AuthAdaptHelper(auth authn.Authenticator) (registry.LoginOption, error)

AuthAdaptHelper returns an ORAS credentials callback configured with the authorization data from the given authn authenticator. This allows for example to make use of credential helpers from cloud providers. Ref: https://github.com/google/go-containerregistry/tree/main/pkg/authn

func ClientGenerator

func ClientGenerator(tlsConfig *tls.Config, isLogin, insecureHTTP bool) (*registry.Client, string, error)

ClientGenerator generates a registry client and a temporary credential file. The client is meant to be used for a single reconciliation. The file is meant to be used for a single reconciliation and deleted after.

func KeychainAdaptHelper

func KeychainAdaptHelper(keyChain authn.Keychain) func(string) (registry.LoginOption, error)

KeyChainAdaptHelper returns an ORAS credentials callback configured with the authorization data from the given authn keychain. This allows for example to make use of credential helpers from cloud providers. Ref: https://github.com/google/go-containerregistry/tree/main/pkg/authn

func LoginOptionFromSecret

func LoginOptionFromSecret(registryURL string, secret corev1.Secret) (authn.Keychain, error)

LoginOptionFromSecret derives authentication data from a Secret to login to an OCI registry. This Secret may either hold "username" and "password" fields or be of the corev1.SecretTypeDockerConfigJson type and hold a corev1.DockerConfigJsonKey field with a complete Docker configuration. If both, "username" and "password" are empty, a nil LoginOption and a nil error will be returned.

func NewLoginOption

func NewLoginOption(auth authn.Authenticator, keychain authn.Keychain, registryURL string) (registry.LoginOption, error)

NewLoginOption returns a registry login option for the given HelmRepository. If the HelmRepository does not specify a secretRef, a nil login option is returned.

func TLSLoginOption

func TLSLoginOption(certFile, keyFile, caFile string) registry.LoginOption

TLSLoginOption returns a LoginOption that can be used to configure the TLS client. It requires either the caFile or both certFile and keyFile to be not blank.