constants

Documentation

Index

• Constants
• Variables

Constants

const (
	// AllowAll is the value used to allow all images with CVEs, except for allowlisted CVEs
	AllowAll = "ALLOW_ALL"
	// BlockAll is the value used to block all images with CVEs, except for allowlisted CVEs
	BlockAll = "BLOCK_ALL"

	// InvalidImageSecPolicy is the key for labels and annotations
	InvalidImageSecPolicy           = "kritis.grafeas.io/invalidImageSecPolicy"
	InvalidImageSecPolicyLabelValue = "invalidImageSecPolicy"

	// ImageAttestation is the key for labels for indication attestaions.
	ImageAttestation             = "kritis.grafeas.io/attestation"
	NoAttestationsLabelValue     = "notAttested"
	PreviouslyAttestedLabelValue = "attested"

	// Breakglass is the key for the breakglass annotation
	Breakglass = "kritis.grafeas.io/breakglass"

	// A list of label values
	PreviouslyAttestedAnnotation = "Previously attested."
	NoAttestationsAnnotation     = "No valid attestations present. This pod will not be able to restart in future"

	// Atomic Container Signature type
	AtomicContainerSigType = "atomic container signature"

	// Constants for Metadata Library
	PageSize          = int32(100)
	ResourceURLPrefix = "https://"

	// Constants relevant for the GCB event parser
	CloudSourceRepoPattern = "https://source.developers.google.com/p/%s/r/%s%s"

	// Constants for the configuration of which metadata backend
	ContainerAnalysisMetadata = "containerAnalysis"
	GrafeasMetadata           = "grafeas"
)

Variables

var (
	// GlobalImageAllowlist is a list of images that are globally allowed
	// They should always pass the webhook check
	GlobalImageAllowlist = []string{"gcr.io/kritis-project/kritis-server",
		"gcr.io/kritis-project/preinstall",
		"gcr.io/kritis-project/postinstall",
		"gcr.io/kritis-project/predelete",
		"us.gcr.io/grafeas/grafeas-server",
	}
)