You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/api-types/index-v1alpha1.md
+13-13Lines changed: 13 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -27,10 +27,10 @@
27
27
*[MatchResource](#matchresource)
28
28
*[Policy](#policy)
29
29
*[RFC3161Timestamp](#rfc3161timestamp)
30
+
*[RemotePolicy](#remotepolicy)
30
31
*[Source](#source)
31
32
*[StaticRef](#staticref)
32
33
*[TLog](#tlog)
33
-
*[URL](#url)
34
34
35
35
## CertificateAuthority
36
36
@@ -283,7 +283,7 @@ Policy specifies a policy to use for Attestation or the CIP validation (iff at l
283
283
| ----- | ----------- | ------ | -------- |
284
284
| type | Which kind of policy this is, currently only rego or cue are supported. Furthermore, only cue is tested :) | string | true |
285
285
| data | Data contains the policy definition. | string | false |
286
-
| remote | Remote defines the url to a policy. |[URL](#url)| false |
286
+
| remote | Remote defines the url to a policy. |[RemotePolicy](#remotepolicy)| false |
287
287
| configMapRef | ConfigMapRef defines the reference to a configMap with the policy definition. |[ConfigMapReference](#configmapreference)| false |
288
288
| fetchConfigFile | FetchConfigFile controls whether ConfigFile will be fetched and made available for CIP level policy evaluation. Note that this only gets evaluated (and hence fetched) iff at least one authority matches. The ConfigFile will then be available in this format: https://github.com/opencontainers/image-spec/blob/main/config.md| bool | false |
289
289
| includeSpec | IncludeSpec controls whether resource `Spec` will be included and made available for CIP level policy evaluation. Note that this only gets evaluated iff at least one authority matches. Also note that because Spec may be of a different shape depending on the resource being evaluatied (see MatchResource for filtering) you might want to configure these to match the policy file to ensure the shape of the Spec is what you expect when evaling the policy. | bool | false |
@@ -302,6 +302,17 @@ RFC3161Timestamp specifies the URL to a RFC3161 time-stamping server that holds
302
302
303
303
[Back to TOC](#table-of-contents)
304
304
305
+
## RemotePolicy
306
+
307
+
RemotePolicy defines all the properties to fetch a remote policy
308
+
309
+
| Field | Description | Scheme | Required |
310
+
| ----- | ----------- | ------ | -------- |
311
+
| url | URL to the policy data. | apis.URL | false |
312
+
| sha256sum | Sha256sum defines the exact sha256sum computed out of the 'body' of the http response. | string | false |
313
+
314
+
[Back to TOC](#table-of-contents)
315
+
305
316
## Source
306
317
307
318
Source specifies the location of the signature
@@ -333,14 +344,3 @@ TLog specifies the URL to a transparency log that holds the signature and public
333
344
| trustRootRef | Use the Public Key from the referred TrustRoot.TLog | string | false |
334
345
335
346
[Back to TOC](#table-of-contents)
336
-
337
-
## URL
338
-
339
-
URL defines all the propierties to fetch a remote policy
340
-
341
-
| Field | Description | Scheme | Required |
342
-
| ----- | ----------- | ------ | -------- |
343
-
| url | URL to the policy data. | apis.URL | false |
344
-
| sha256sum | Sha256sum defines the shasum of the policy hosted in the url. | string | false |
Copy file name to clipboardExpand all lines: docs/api-types/index.md
+13-13Lines changed: 13 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -18,10 +18,10 @@
18
18
*[MatchResource](#matchresource)
19
19
*[Policy](#policy)
20
20
*[RFC3161Timestamp](#rfc3161timestamp)
21
+
*[RemotePolicy](#remotepolicy)
21
22
*[Source](#source)
22
23
*[StaticRef](#staticref)
23
24
*[TLog](#tlog)
24
-
*[URL](#url)
25
25
26
26
## Attestation
27
27
@@ -168,7 +168,7 @@ Policy specifies a policy to use for Attestation or the CIP validation (iff at l
168
168
| ----- | ----------- | ------ | -------- |
169
169
| type | Which kind of policy this is, currently only rego or cue are supported. Furthermore, only cue is tested :) | string | true |
170
170
| data | Data contains the policy definition. | string | false |
171
-
| remote | Remote defines the url to a policy. |[URL](#url)| false |
171
+
| remote | Remote defines the url to a policy. |[RemotePolicy](#remotepolicy)| false |
172
172
| configMapRef | ConfigMapRef defines the reference to a configMap with the policy definition. |[ConfigMapReference](#configmapreference)| false |
173
173
| fetchConfigFile | FetchConfigFile controls whether ConfigFile will be fetched and made available for CIP level policy evaluation. Note that this only gets evaluated (and hence fetched) iff at least one authority matches. The ConfigFile will then be available in this format: https://github.com/opencontainers/image-spec/blob/main/config.md| bool | false |
174
174
| includeSpec | IncludeSpec controls whether resource `Spec` will be included and made available for CIP level policy evaluation. Note that this only gets evaluated iff at least one authority matches. Also note that because Spec may be of a different shape depending on the resource being evaluatied (see MatchResource for filtering) you might want to configure these to match the policy file to ensure the shape of the Spec is what you expect when evaling the policy. | bool | false |
@@ -187,6 +187,17 @@ RFC3161Timestamp specifies the URL to a RFC3161 time-stamping server that holds
187
187
188
188
[Back to TOC](#table-of-contents)
189
189
190
+
## RemotePolicy
191
+
192
+
RemotePolicy defines all the properties to fetch a remote policy
193
+
194
+
| Field | Description | Scheme | Required |
195
+
| ----- | ----------- | ------ | -------- |
196
+
| url | URL to the policy data. | apis.URL | false |
197
+
| sha256sum | Sha256sum defines the exact sha256sum computed out of the 'body' of the http response. | string | false |
198
+
199
+
[Back to TOC](#table-of-contents)
200
+
190
201
## Source
191
202
192
203
Source specifies the location of the signature
@@ -218,14 +229,3 @@ TLog specifies the URL to a transparency log that holds the signature and public
218
229
| trustRootRef | Use the Public Key from the referred TrustRoot.TLog | string | false |
219
230
220
231
[Back to TOC](#table-of-contents)
221
-
222
-
## URL
223
-
224
-
URL defines all the propierties to fetch a remote policy
225
-
226
-
| Field | Description | Scheme | Required |
227
-
| ----- | ----------- | ------ | -------- |
228
-
| url | URL to the policy data. | apis.URL | false |
229
-
| sha256sum | Sha256sum defines the shasum of the policy hosted in the url. | string | false |
0 commit comments