mirror of
https://github.com/kyverno/kyverno.git
synced 2025-03-07 00:17:13 +00:00
27 lines
930 B
Go
27 lines
930 B
Go
|
package imagedataloader
|
||
|
|
|
||
|
|
import (
|
||
|
|
"context"
|
||
|
|
|
||
|
|
"github.com/google/go-containerregistry/pkg/authn"
|
||
|
|
kauth "github.com/google/go-containerregistry/pkg/authn/kubernetes"
|
||
|
|
corev1 "k8s.io/api/core/v1"
|
||
|
|
k8serrors "k8s.io/apimachinery/pkg/api/errors"
|
||
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
||
|
|
k8scorev1 "k8s.io/client-go/kubernetes/typed/core/v1"
|
||
|
|
)
|
||
|
|
|
||
|
|
// generateKeychainForPullSecrets generates keychain by fetching secrets data from imagePullSecrets.
|
||
|
|
func generateKeychainForPullSecrets(ctx context.Context, lister k8scorev1.SecretInterface, imagePullSecrets ...string) (authn.Keychain, error) {
|
||
|
|
var secrets []corev1.Secret
|
||
|
|
for _, imagePullSecret := range imagePullSecrets {
|
||
|
|
secret, err := lister.Get(ctx, imagePullSecret, metav1.GetOptions{})
|
||
|
|
if err == nil {
|
||
|
|
secrets = append(secrets, *secret)
|
||
|
|
} else if !k8serrors.IsNotFound(err) {
|
||
|
|
return nil, err
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return kauth.NewFromPullSecrets(context.TODO(), secrets)
|
||
|
|
}
|