verifier

Documentation

Index

• func WithCacheEnabled(useCache bool) verifierOptsFunc
• func WithEnableDebug(debug bool) verifierOptsFunc
• func WithImagePullSecrets(secrets string) verifierOptsFunc
• func WithInsecureRegistry(insecureRegistry bool) verifierOptsFunc
• func WithMaxCacheSize(maxCacheSize int64) verifierOptsFunc
• func WithMaxCacheTTL(maxCacheTTL time.Duration) verifierOptsFunc
• func WithMaxSignatureAttempts(maxSignatureAttempts int) verifierOptsFunc
• func WithPluginConfig(pluginConfigMap string) verifierOptsFunc
• func WithProviderAuthConfigResolver(...) verifierOptsFunc
• func WithTokenReviewEnabled(enableTokenReview bool) verifierOptsFunc
• type ImageVerifierMetatdata
  • func NewImageVerifierMetatdata(annotation map[string]bool) ImageVerifierMetatdata
• type Response
  • func NewResponse(log *zap.SugaredLogger, ivm ImageVerifierMetatdata) Response
• type Verifier
  • func NewVerifier(logger *zap.SugaredLogger, opts ...verifierOptsFunc) Verifier

Functions

func WithCacheEnabled

func WithCacheEnabled(useCache bool) verifierOptsFunc

func WithEnableDebug

func WithEnableDebug(debug bool) verifierOptsFunc

func WithImagePullSecrets

func WithImagePullSecrets(secrets string) verifierOptsFunc

func WithInsecureRegistry

func WithInsecureRegistry(insecureRegistry bool) verifierOptsFunc

func WithMaxCacheSize

func WithMaxCacheSize(maxCacheSize int64) verifierOptsFunc

func WithMaxCacheTTL

func WithMaxCacheTTL(maxCacheTTL time.Duration) verifierOptsFunc

func WithMaxSignatureAttempts

func WithMaxSignatureAttempts(maxSignatureAttempts int) verifierOptsFunc

func WithPluginConfig

func WithPluginConfig(pluginConfigMap string) verifierOptsFunc

func WithProviderAuthConfigResolver

func WithProviderAuthConfigResolver(providerAuthConfigResolver func(context.Context, registry.Reference) (*authn.AuthConfig, error)) verifierOptsFunc

func WithTokenReviewEnabled

func WithTokenReviewEnabled(enableTokenReview bool) verifierOptsFunc

Types

type ImageVerifierMetatdata

type ImageVerifierMetatdata interface {
	Add(image string, value bool)
	GetAnnotation() map[string]bool
	IsVerified(image string) bool
	GetJSONPatchOperation() string
	GetAnnotationKeyForJSONPatch() string
}

func NewImageVerifierMetatdata

func NewImageVerifierMetatdata(annotation map[string]bool) ImageVerifierMetatdata

type Response

type Response interface {
	GetResponse() types.ResponseData
	GetImageList() map[string]types.AttestationList
	AddImage(imageRef string, img *types.ImageInfo)
	BuildAttestationList(Attestations []types.AttestationsInfo) error
	VerificationFailed(msg string) (types.ResponseData, error)
	VerificationSucceeded(msg string) (types.ResponseData, error)
}

func NewResponse

func NewResponse(log *zap.SugaredLogger, ivm ImageVerifierMetatdata) Response

type Verifier

type Verifier interface {
	// HandleCheckImages is a handler function that takes Kyverno images variable in body and returns JSONPatch compatible object in response
	HandleCheckImages(w http.ResponseWriter, r *http.Request)

	UpdateNotationVerfier() error
	// Shuts down all the factories before exiting
	Stop()
}

func NewVerifier

func NewVerifier(logger *zap.SugaredLogger, opts ...verifierOptsFunc) Verifier