cosign policy-controller v0.15.1

ClusterImagePolicy.spec.match[].selector.matchExpressions[].values.spec.authorities

Authorities defines the rules for discovering and validating signatures.

ClusterImagePolicy.spec.match[].selector.matchExpressions[].values.spec.authorities fields and descriptions
Field / Type	Description
attestations `object[]`	Attestations is a list of individual attestations for this authority, once the signature for this authority has been verified.
ctlog `object`	CTLog sets the configuration to verify the authority against a Rekor instance.
key `object`	Key defines the type of key to validate the image.
keyless `object`	Keyless sets the configuration to verify the authority against a Fulcio instance.
name `string`	Name is the name for this authority. Used by the CIP Policy validator to be able to reference matching signature or attestation verifications. If not specified, the name will be authority-<index in array>
rfc3161timestamp `object`	RFC3161Timestamp sets the configuration to verify the signature timestamp against a RFC3161 time-stamping instance.
signatureFormat `string`	SignatureFormat specifies the format the authority expects. Supported formats are "legacy" and "bundle". If not specified, the default is "legacy" (cosign's default).
source `object[]`	Sources sets the configuration to specify the sources from where to consume the signatures.
static `object`	Static specifies that signatures / attestations are not validated but instead a static policy is applied against matching images.