ImageRepository.spec

AccessFrom defines an ACL for allowing cross-namespace references to the ImageRepository object based on the caller's namespace labels.

CertSecretRef can be given the name of a Secret containing either or both of - a PEM-encoded client certificate (`tls.crt`) and private key (`tls.key`); - a PEM-encoded CA certificate (`ca.crt`) and whichever are supplied, will be used for connecting to the registry. The client cert and key are useful if you are authenticating with a certificate; the CA cert is useful if you are using a self-signed server certificate. The Secret must be of type `Opaque` or `kubernetes.io/tls`. Note: Support for the `caFile`, `certFile` and `keyFile` keys has been deprecated.

ExclusionList is a list of regex strings used to exclude certain tags from being stored in the database.

• default: ["^.*\\.sig$"]
• maxItems: 25

Image is the name of the image repository

Insecure allows connecting to a non-TLS HTTP container registry.

Interval is the length of time to wait between scans of the image repository.

• pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m|h))+$

The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'. When not specified, defaults to 'generic'.

• enum: ["generic","aws","azure","gcp"]
• default: "generic"

ProxySecretRef specifies the Secret containing the proxy configuration to use while communicating with the container registry.

SecretRef can be given the name of a secret containing credentials to use for the image registry. The secret should be created with `kubectl create secret docker-registry`, or the equivalent.

ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull if the service account has attached pull secrets.

• maxLength: 253

This flag tells the controller to suspend subsequent image scans. It does not apply to already started scans. Defaults to false.

Timeout for image scanning. Defaults to 'Interval' duration.

• pattern: ^([0-9]+(\.[0-9]+)?(ms|s|m))+$