ClusterImagePolicy.spec.authorities[].attestations.policy.configMapRef.spec

Authorities defines the rules for discovering and validating signatures.

Images defines the patterns of image names that should be subject to this policy.

Match allows selecting resources based on their properties.

Mode controls whether a failing policy will be rejected (not admitted), or if errors are converted to Warnings. enforce - Reject (default) warn - allow but warn

Policy is an optional policy that can be applied against all the successfully validated Authorities. If no authorities pass, this does not even get evaluated, as the Policy is considered failed.