verify

Documentation

Index

• func ExtractVerifyInfo(ctx context.Context, inst *lsv1alpha1.Installation, ...) (string, PublicKeyData, CaCertData, error)
• func IsVerifyEnabled(inst *lsv1alpha1.Installation, lsConfig *config.LandscaperConfiguration) bool
• type CaCertData
• type PublicKeyData

Functions

func ExtractVerifyInfo

func ExtractVerifyInfo(ctx context.Context, inst *lsv1alpha1.Installation, installationContext *lsv1alpha1.Context, client client.Client) (string, PublicKeyData, CaCertData, error)

ExtractVerifyInfo extracts signautre name, publickey data and caCert data from the secrets referenced in the context

func IsVerifyEnabled

func IsVerifyEnabled(inst *lsv1alpha1.Installation, lsConfig *config.LandscaperConfiguration) bool

IsVerifyEnabled returns if verification is enabled. The following rules apply: 1. if lsConfig.SignatureVerificationEnforcementPolicy is Enforce, always return true 2. if lsConfig.SignatureVerificationEnforcementPolicy is Disabled, always return false even if installation.Spec.Verification is set. 3. else, if SignatureVerificationEnforcementPolicy is DoNotEnforce return Installation.Spec.Verification != nil 3. otherwise should not happen, return true as a safe fallback

Types

type CaCertData

type CaCertData []byte

type PublicKeyData

type PublicKeyData []byte