registryauth

Documentation

Index

• type BasicTokenConfig
• type BasicTokenProvider
  • func NewBasicTokenProvider(cfg BasicTokenConfig) *BasicTokenProvider
  • func (p *BasicTokenProvider) Match(host string) bool
  • func (p *BasicTokenProvider) Resolve(ctx context.Context, host, imageRef string) (string, error)
• type DockerConfigJSONProvider
  • func NewDockerConfigJSONProvider(registryPattern, raw string) *DockerConfigJSONProvider
  • func (p *DockerConfigJSONProvider) Match(host string) bool
  • func (p *DockerConfigJSONProvider) Resolve(ctx context.Context, host, imageRef string) (string, error)
• type ECRConfig
• type ECRProvider
  • func NewECRProvider(cfg ECRConfig) *ECRProvider
  • func (p *ECRProvider) Match(host string) bool
  • func (p *ECRProvider) Resolve(ctx context.Context, host, imageRef string) (string, error)
• type Provider
  • func BuildProviders(ctx context.Context, regs []map[string]any) []Provider

Types

type BasicTokenConfig

type BasicTokenConfig struct {
	Registry string
	Username string
	Password string
	Token    string
}

type BasicTokenProvider

type BasicTokenProvider struct {
	// contains filtered or unexported fields
}

func NewBasicTokenProvider

func NewBasicTokenProvider(cfg BasicTokenConfig) *BasicTokenProvider

func (*BasicTokenProvider) Match

func (p *BasicTokenProvider) Match(host string) bool

func (*BasicTokenProvider) Resolve

func (p *BasicTokenProvider) Resolve(ctx context.Context, host, imageRef string) (string, error)

type DockerConfigJSONProvider

type DockerConfigJSONProvider struct {
	// contains filtered or unexported fields
}

DockerConfigJSONProvider resolves credentials from a .dockerconfigjson blob

func NewDockerConfigJSONProvider

func NewDockerConfigJSONProvider(registryPattern, raw string) *DockerConfigJSONProvider

func (*DockerConfigJSONProvider) Match

func (p *DockerConfigJSONProvider) Match(host string) bool

func (*DockerConfigJSONProvider) Resolve

func (p *DockerConfigJSONProvider) Resolve(ctx context.Context, host, imageRef string) (string, error)

type ECRConfig

type ECRConfig struct {
	Registry string // pattern, e.g., *.dkr.ecr.us-east-1.amazonaws.com
	Region   string // optional override
}

type ECRProvider

type ECRProvider struct {
	// contains filtered or unexported fields
}

func NewECRProvider

func NewECRProvider(cfg ECRConfig) *ECRProvider

func (*ECRProvider) Match

func (p *ECRProvider) Match(host string) bool

func (*ECRProvider) Resolve

func (p *ECRProvider) Resolve(ctx context.Context, host, imageRef string) (string, error)

type Provider

type Provider interface {
	Match(host string) bool
	Resolve(ctx context.Context, host string, imageRef string) (string, error)
}

Provider supplies Docker RegistryAuth for a given image host

func BuildProviders

func BuildProviders(ctx context.Context, regs []map[string]any) []Provider

BuildProviders constructs providers from normalized registries configuration. Each entry is expected to contain keys: name, registry, auth{type, username, password, token, region, dockerconfigjson}

Entries with no auth block, missing type, or an unknown type are skipped with a warn log so misconfigured registries don't silently disappear into anonymous-pull territory (see RUNE-? — the GHCR symptom that surfaced this).