cosign policy-controller v0.15.1
ClusterImagePolicy.spec.match[].selector.matchExpressions.values.spec.authorities.source
Sources sets the configuration to specify the sources from where to consume the signatures.
| Field / Type | Description |
|---|---|
oci | OCI defines the registry from where to pull the signature / attestations. |
SignaturePullSecrets is an optional list of references to secrets in the same namespace as the deploying resource for pulling any of the signatures used by this Source. | |
tagPrefix | TagPrefix is an optional prefix that signature and attestations have. This is the 'tag based discovery' and in the future once references are fully supported that should likely be the preferred way to handle these. |