Skip to content

Commit

Permalink
add imagepolicy to payload crds
Browse files Browse the repository at this point in the history 
Signed-off-by: Qi Wang <[email protected]>
  • Loading branch information
@QiWang19
QiWang19 committed Sep 24, 2024
1 parent 2669d1e commit ae31de7
Show file tree
Hide file tree
Showing 20 changed files with 1,290 additions and 39 deletions.
1 change: 1 addition & 0 deletions config/v1alpha1/types_cluster_image_policy.go
View file
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,7 @@ type ClusterImagePolicySpec struct {
// If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored.
// In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories
// quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation.
// If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied.
// For additional details about the format, please refer to the document explaining the docker transport field,
// which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker
// +kubebuilder:validation:Required
Expand Down
1 change: 1 addition & 0 deletions config/v1alpha1/types_image_policy.go
View file
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,7 @@ type ImagePolicySpec struct {
// If multiple scopes match a given image, only the policy requirements for the most specific scope apply. The policy requirements for more general scopes are ignored.
// In addition to setting a policy appropriate for your own deployed applications, make sure that a policy on the OpenShift image repositories
// quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev (or on a more general scope) allows deployment of the OpenShift images required for cluster operation.
// If a scope is configured in both the ClusterImagePolicy and the ImagePolicy, or if the scope in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy, only the policy from the ClusterImagePolicy will be applied.
// For additional details about the format, please refer to the document explaining the docker transport field,
// which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker
// +kubebuilder:validation:Required
Expand Down
9 changes: 6 additions & 3 deletions ...ed.crd-manifests/0000_10_config-operator_01_clusterimagepolicies-CustomNoUpgrade.crd.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -289,9 +289,12 @@ spec:
applications, make sure that a policy on the OpenShift image repositories
quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev
(or on a more general scope) allows deployment of the OpenShift
images required for cluster operation. For additional details about
the format, please refer to the document explaining the docker transport
field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
images required for cluster operation. If a scope is configured
in both the ClusterImagePolicy and the ImagePolicy, or if the scope
in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy,
only the policy from the ClusterImagePolicy will be applied. For
additional details about the format, please refer to the document
explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
items:
maxLength: 512
type: string
Expand Down
9 changes: 6 additions & 3 deletions ...rd-manifests/0000_10_config-operator_01_clusterimagepolicies-DevPreviewNoUpgrade.crd.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -289,9 +289,12 @@ spec:
applications, make sure that a policy on the OpenShift image repositories
quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev
(or on a more general scope) allows deployment of the OpenShift
images required for cluster operation. For additional details about
the format, please refer to the document explaining the docker transport
field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
images required for cluster operation. If a scope is configured
in both the ClusterImagePolicy and the ImagePolicy, or if the scope
in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy,
only the policy from the ClusterImagePolicy will be applied. For
additional details about the format, please refer to the document
explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
items:
maxLength: 512
type: string
Expand Down
9 changes: 6 additions & 3 deletions ...d-manifests/0000_10_config-operator_01_clusterimagepolicies-TechPreviewNoUpgrade.crd.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -289,9 +289,12 @@ spec:
applications, make sure that a policy on the OpenShift image repositories
quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev
(or on a more general scope) allows deployment of the OpenShift
images required for cluster operation. For additional details about
the format, please refer to the document explaining the docker transport
field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
images required for cluster operation. If a scope is configured
in both the ClusterImagePolicy and the ImagePolicy, or if the scope
in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy,
only the policy from the ClusterImagePolicy will be applied. For
additional details about the format, please refer to the document
explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
items:
maxLength: 512
type: string
Expand Down
9 changes: 6 additions & 3 deletions ...generated.crd-manifests/0000_10_config-operator_01_imagepolicies-CustomNoUpgrade.crd.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -289,9 +289,12 @@ spec:
applications, make sure that a policy on the OpenShift image repositories
quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev
(or on a more general scope) allows deployment of the OpenShift
images required for cluster operation. For additional details about
the format, please refer to the document explaining the docker transport
field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
images required for cluster operation. If a scope is configured
in both the ClusterImagePolicy and the ImagePolicy, or if the scope
in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy,
only the policy from the ClusterImagePolicy will be applied. For
additional details about the format, please refer to the document
explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
items:
maxLength: 512
type: string
Expand Down
9 changes: 6 additions & 3 deletions ...rated.crd-manifests/0000_10_config-operator_01_imagepolicies-DevPreviewNoUpgrade.crd.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -289,9 +289,12 @@ spec:
applications, make sure that a policy on the OpenShift image repositories
quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev
(or on a more general scope) allows deployment of the OpenShift
images required for cluster operation. For additional details about
the format, please refer to the document explaining the docker transport
field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
images required for cluster operation. If a scope is configured
in both the ClusterImagePolicy and the ImagePolicy, or if the scope
in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy,
only the policy from the ClusterImagePolicy will be applied. For
additional details about the format, please refer to the document
explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
items:
maxLength: 512
type: string
Expand Down
9 changes: 6 additions & 3 deletions ...ated.crd-manifests/0000_10_config-operator_01_imagepolicies-TechPreviewNoUpgrade.crd.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -289,9 +289,12 @@ spec:
applications, make sure that a policy on the OpenShift image repositories
quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev
(or on a more general scope) allows deployment of the OpenShift
images required for cluster operation. For additional details about
the format, please refer to the document explaining the docker transport
field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
images required for cluster operation. If a scope is configured
in both the ClusterImagePolicy and the ImagePolicy, or if the scope
in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy,
only the policy from the ClusterImagePolicy will be applied. For
additional details about the format, please refer to the document
explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
items:
maxLength: 512
type: string
Expand Down
9 changes: 6 additions & 3 deletions ...ted-crd-manifests/clusterimagepolicies.config.openshift.io/SigstoreImageVerification.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -289,9 +289,12 @@ spec:
applications, make sure that a policy on the OpenShift image repositories
quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev
(or on a more general scope) allows deployment of the OpenShift
images required for cluster operation. For additional details about
the format, please refer to the document explaining the docker transport
field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
images required for cluster operation. If a scope is configured
in both the ClusterImagePolicy and the ImagePolicy, or if the scope
in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy,
only the policy from the ClusterImagePolicy will be applied. For
additional details about the format, please refer to the document
explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
items:
maxLength: 512
type: string
Expand Down
9 changes: 6 additions & 3 deletions ...aturegated-crd-manifests/imagepolicies.config.openshift.io/SigstoreImageVerification.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -289,9 +289,12 @@ spec:
applications, make sure that a policy on the OpenShift image repositories
quay.io/openshift-release-dev/ocp-release, quay.io/openshift-release-dev/ocp-v4.0-art-dev
(or on a more general scope) allows deployment of the OpenShift
images required for cluster operation. For additional details about
the format, please refer to the document explaining the docker transport
field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
images required for cluster operation. If a scope is configured
in both the ClusterImagePolicy and the ImagePolicy, or if the scope
in ImagePolicy is nested under one of the scopes from the ClusterImagePolicy,
only the policy from the ClusterImagePolicy will be applied. For
additional details about the format, please refer to the document
explaining the docker transport field, which can be found at: https://github.com/containers/image/blob/main/docs/containers-policy.json.5.md#docker'
items:
maxLength: 512
type: string
Expand Down
4 changes: 2 additions & 2 deletions config/v1alpha1/zz_generated.swagger_doc_generated.go
View file

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading

0 comments on commit ae31de7

Please sign in to comment.