mirror of
https://github.com/kyverno/kyverno.git
synced 2024-12-14 11:57:48 +00:00
27 lines
741 B
Go
27 lines
741 B
Go
|
package registryclient
|
||
|
|
|
||
|
|
import (
|
||
|
|
"github.com/google/go-containerregistry/pkg/authn"
|
||
|
|
corev1listers "k8s.io/client-go/listers/core/v1"
|
||
|
|
)
|
||
|
|
|
||
|
|
type autoRefreshSecrets struct {
|
||
|
|
lister corev1listers.SecretNamespaceLister
|
||
|
|
imagePullSecrets []string
|
||
|
|
}
|
||
|
|
|
||
|
|
func NewAutoRefreshSecretsKeychain(lister corev1listers.SecretNamespaceLister, imagePullSecrets ...string) (authn.Keychain, error) {
|
||
|
|
return &autoRefreshSecrets{
|
||
|
|
lister: lister,
|
||
|
|
imagePullSecrets: imagePullSecrets,
|
||
|
|
}, nil
|
||
|
|
}
|
||
|
|
|
||
|
|
func (kc *autoRefreshSecrets) Resolve(resource authn.Resource) (authn.Authenticator, error) {
|
||
|
|
inner, err := generateKeychainForPullSecrets(kc.lister, kc.imagePullSecrets...)
|
||
|
|
if err != nil {
|
||
|
|
return nil, err
|
||
|
|
}
|
||
|
|
return inner.Resolve(resource)
|
||
|
|
}
|