validate

Dec 16, 2023

Changes in this version

+ const NotaryDefaultTrustDir

+ func IsValidationEnabledForNS(ns *corev1.Namespace) bool

+ func ParseAllowedRegistries(registries string) []string

+ type ImageValidatorService interface

+ Validate func(ctx context.Context, image string) error

+ func NewImageValidator(sc *ServiceConfig, notaryClientFactory RepoFactory) ImageValidatorService

+ type NamespaceChecker interface

+ IsValidationEnabledForNS func(namespace string) bool

+ type NotaryConfig struct

+ Url string

+ type NotaryRepoClient interface

+ type NotaryRepoFactory struct

+ Timeout time.Duration

+ func (f NotaryRepoFactory) NewRepoClient(img string, c NotaryConfig) (NotaryRepoClient, error)

+ type NotaryValidator struct

+ type PodValidator interface

+ ValidatePod func(ctx context.Context, pod *corev1.Pod, ns *corev1.Namespace) (ValidationResult, error)

+ func NewPodValidator(imageValidator ImageValidatorService) PodValidator

+ type RepoFactory interface

+ NewRepoClient func(string, NotaryConfig) (NotaryRepoClient, error)

+ type ServiceConfig struct

+ AllowedRegistries []string

+ NotaryConfig NotaryConfig

+ type ValidationResult string

+ const Invalid

+ const NoAction

+ const ServiceUnavailable

+ const Valid