oci

Documentation

Index

• func OIDCAuth(ctx context.Context, url, provider string, proxyURL *url.URL) (authn.Authenticator, error)
• type Anonymous
  • func (a Anonymous) Resolve(_ authn.Resource) (authn.Authenticator, error)
• type VerificationResult
• type Verifier

Functions

func OIDCAuth

func OIDCAuth(ctx context.Context, url, provider string, proxyURL *url.URL) (authn.Authenticator, error)

OIDCAuth generates the OIDC credential authenticator based on the specified cloud provider.

Types

type Anonymous

type Anonymous authn.AuthConfig

Anonymous is an authn.AuthConfig that always returns an anonymous authenticator. It is useful for registries that do not require authentication or when the credentials are not known. It implements authn.Keychain `Resolve` method and can be used as a keychain.

func (Anonymous) Resolve

func (a Anonymous) Resolve(_ authn.Resource) (authn.Authenticator, error)

Resolve implements authn.Keychain.

type VerificationResult

type VerificationResult string

VerificationResult represents the result of a verification process.

const (
	// VerificationResultSuccess indicates that the artifact has been verified.
	VerificationResultSuccess VerificationResult = "verified"
	// VerificationResultFailed indicates that the artifact could not be verified.
	VerificationResultFailed VerificationResult = "unverified"
	// VerificationResultIgnored indicates that the artifact has not been verified
	// but is allowed to proceed. This is used primarily when notation is used
	// as the verifier.
	VerificationResultIgnored VerificationResult = "ignored"
)

type Verifier

type Verifier interface {
	Verify(ctx context.Context, ref name.Reference) (VerificationResult, error)
}

Verifier is an interface for verifying the authenticity of an OCI image.