cosign policy-controller v0.5.7

ClusterImagePolicy.spec.authorities[].keyless

Keyless sets the configuration to verify the authority against a Fulcio instance.

ClusterImagePolicy.spec.authorities[].keyless fields and descriptions
Field / Type	Description
ca-cert `object`	CACert sets a reference to CA certificate
identities `object[]`	Identities sets a list of identities.
insecureIgnoreSCT `boolean`	InsecureIgnoreSCT omits verifying if a certificate contains an embedded SCT
trustRootRef `string`	Use the Certificate Chain from the referred TrustRoot.CertificateAuthorities and TrustRoot.CTLog
url `string`	URL defines a url to the keyless instance.