Add mutation for adding digest to image spec

This commit is contained in:
Jonny Stoten
2024-06-20 12:25:04 +01:00
parent 0e3d5b5911
commit 3378c90b3f
8 changed files with 138 additions and 30 deletions

View File

@@ -1,20 +1,22 @@
apiVersion: mutations.gatekeeper.sh/v1beta1
kind: Assign
metadata:
name: append-valid-suffix-to-image
name: pin-to-digest
spec:
applyTo:
- groups: [""]
kinds: ["Pod"]
versions: ["v1"]
- groups: [""]
kinds: ["Pod"]
versions: ["v1"]
match:
scope: Namespaced
kinds:
- apiGroups: ["*"]
kinds: ["Pod"]
- apiGroups: ["*"]
kinds: ["Pod"]
namespaces: ["test"]
location: "spec.containers[name: *].image"
parameters:
assign:
externalData:
provider: external-data-provider
provider: attest-provider-mutate
dataSource: ValueAtLocation
failurePolicy: Fail