feat: add support for policy parameters

charts/attest-provider/README.md

@@ -15,3 +15,4 @@
 |attestationStyle|lookup attestations from image index (`attached`) or `referrers`|`referrers`|
 |provider.timeout|timeout in seconds for gatekeeper external data request|`30`|
 |provider.tls.caBundle|base64 encoded CA cert for provider|`""`|
+|parameters|additional parameters to pass to the policy implementation|`""`|

charts/attest-provider/templates/attest-provider-deployment.yaml

@@ -57,6 +57,9 @@ spec:
         {{- if .Values.referrersRepo }}
         - --referrers-source={{ .Values.referrersRepo }}
         {{- end }}
+        {{- if .Values.parameters }}
+        - --parameters={{ .Values.parameters }}
+        {{- end }}
 
         ports:
         - containerPort: {{ .Values.port }}

charts/attest-provider/values.yaml

@@ -22,6 +22,11 @@ tufTargetsSource: registry-1.docker.io/docker/tuf-targets
 
 attestationStyle: referrers
 
+# parameters for the the policy implementation
+# e.g. parameters: "mode=strict"
+
+parameters: ""
+
 provider:
   timeout: 30
   tls: