-
Notifications
You must be signed in to change notification settings - Fork 547
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix #1583 #1582. Disallow regex now until implemented. #1584
Conversation
Signed-off-by: Ville Aikas <vaikas@chainguard.dev>
Codecov Report
@@ Coverage Diff @@
## main #1584 +/- ##
==========================================
+ Coverage 27.19% 27.46% +0.27%
==========================================
Files 136 137 +1
Lines 7712 7741 +29
==========================================
+ Hits 2097 2126 +29
Misses 5386 5386
Partials 229 229
Continue to review full report at Codecov.
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
// to find, since they handle '*' anywhere in the string as a wildcard. For our | ||
// use we only want to handle it at the end, and hence this effectively turns | ||
// into 'hasPrefix' string matching up to the trailing *. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we want to handle it in a bunch of places as well, e.g. to glob out the account number of region in an ECR repo.
One other thing we will need to consider is normalizing image names, e.g. ubuntu
vs. docker.io/ubuntu
vs. docker.io/ubuntu:latest`.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is fine for now, but I think we should plan to expand this in subsequent changes.
sigstore#1584) Signed-off-by: Ville Aikas <vaikas@chainguard.dev>
Signed-off-by: Ville Aikas vaikas@chainguard.dev
Summary
Implement glob support for ClusterImagePolicy. Supports trailing '*' only. Fixes #1582
Disallow regex until there's actually support for implementing it.
Fix incorrect error message fields. #1583
Ticket Link
Fixes: #1582
Fixed: #1583
Release Note