security

Documentation

Overview

Copyright (c) 2016-2019 Uber Technologies, Inc.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Index

• type Authenticator
  • func NewAuthenticator(address string, config Config) (Authenticator, error)
• type Config

Types

type Authenticator

type Authenticator interface {
	// Authenticate returns a send option to authenticate to the registry,
	// scoped to the given image repository.
	Authenticate(repo string) ([]httputil.SendOption, error)
}

Authenticator creates send options to authenticate requests to registry backends.

func NewAuthenticator

func NewAuthenticator(address string, config Config) (Authenticator, error)

NewAuthenticator returns a new authenticator for the given docker registry address, TLS, and credentials configuration. It supports both basic auth and token based authentication challenges. If TLS is disabled, no authentication is attempted.

type Config

type Config struct {
	TLS                    httputil.TLSConfig `yaml:"tls"`
	BasicAuth              *types.AuthConfig  `yaml:"basic"`
	RemoteCredentialsStore string             `yaml:"credsStore"`
	EnableHTTPFallback     bool               `yaml:"enableHTTPFallback"`
}

Config contains tls and basic auth configuration.