website icon indicating copy to clipboard operation
website copied to clipboard

[Enhancement] Verify Image Rules: Ignoring Tlog Documentation Update

Open DogukanK opened this issue 5 months ago • 2 comments

Description

The example on the website for disabling tlog verification check is out of date, it should be updated.

error: error validating "image-policy.yaml": error validating data: ValidationError(ClusterPolicy.spec.rules[1].verifyImages[0].attestors[0].entries[0].keys.rekor): unknown field "ignoreTlog" in io.kyverno.v1.ClusterPolicy.spec.rules.verifyImages.attestors.entries.keys.rekor; if you choose to ignore these errors, turn validation off with --validate=false

To disable the check, the field must be completely removed as it said in the API reference

Rekor provides configuration for the Rekor transparency log service. If the value is nil, Rekor is not checked. If an empty object is provided the public instance of Rekor (https://rekor.sigstore.dev/) is used.

Slack discussion

No response

DogukanK avatar Aug 26 '24 07:08 DogukanK