trustedresources

Documentation

Index

• Constants
• func Sign(o metav1.Object, keyfile, kmsKey, targetFile string) error
• func UnmarshalCRD(buf []byte, kind string) (metav1.Object, []byte, error)
• func Verify(o metav1.Object, keyfile, kmsKey string) error
• func VerifyInterface(obj interface{}, verifier signature.Verifier, signature []byte) error

Constants

const (
	// SignatureAnnotation is the key of signature in annotation map
	SignatureAnnotation = "tekton.dev/signature"
)

Functions

func Sign

func Sign(o metav1.Object, keyfile, kmsKey, targetFile string) error

Sign the crd and output signed bytes to writer

func UnmarshalCRD

func UnmarshalCRD(buf []byte, kind string) (metav1.Object, []byte, error)

UnmarshalCRD will get the task/pipeline from buffer and extract the signature.

func Verify

func Verify(o metav1.Object, keyfile, kmsKey string) error

Verify the crd

func VerifyInterface

func VerifyInterface(
	obj interface{},
	verifier signature.Verifier,
	signature []byte,
) error

VerifyInterface get the checksum of json marshalled object and verify it.