Kyverno Design Proposal - Image Verification Restructuring

Guest Hunter2022/02/01 22:00:49

Test anonymous comment (Edited)

2022/02/02 07:17:48

@samj1912 - do we have an example of this? (Edited)

2022/02/02 07:24:17

Cosign is pending updates to allow more flexible policies. See: https://docs.google.com/document/d/1gBLEOOHWOmvHVsoJbgGU74GdwA6CGxMRp3MAeEB50l4/edit# and: https://docs.google.com/document/d/1DoOOF29FEgjzqHwQ0Depar9Vm1lkCk_lwt8CGCyyAR0/edit# (Edited)

Jim Bugwadia

2022/02/03 01:44:53

The context is really just a map of data used for rule processing - sort of like a programming stack. Seems a bit odd to put the verification in the Context. If the intent is to add keys to the context for conditional checks, this may be handled by upcoming changes in Cosign. (Edited)