ConvertCertificateAuthority converts public into private CertificateAuthority.

ConvertSigstoreKeys takes a source and converts into a SigstoreKeys suitable for serialization into a ConfigMap entry.

ConvertTransparencyLogInstance converts public into private TransparencyLogInstance.

FromContext extracts a Config from the provided context.

FromContextOrDefaults is like FromContext, but when no Config is attached it returns a Config populated with the defaults for each of the Config fields.

NewImagePoliciesConfigFromConfigMap creates a Features from the supplied ConfigMap.

NewImagePoliciesConfigFromMap creates an ImagePolicyConfig from the supplied Map.

NewImagePoliciesConfigFromConfigMap creates a Features from the supplied ConfigMap.

NewSigstoreKeysFromMap creates a map of SigstoreKeys to use for validation.

NewStore creates a new store of Configs and optionally calls functions when ConfigMaps are updated.

ToContext attaches the provided Config to the provided context, returning the new context with the Config attached.

ImagePoliciesConfigName is the name of ConfigMap created by the reconciler and consumed by the admission webhook.

SigstoreKeysConfigName is the name of ConfigMap created by the reconciler and consumed by the admission webhook for determining which Keys/Certificates are trusted for things like Fulcio/Rekor, etc.

Config holds the collection of configurations that we attach to contexts.

Store is a typed wrapper around configmap.Untyped store to handle our configmaps.

SigstoreKeys contains all the necessary Keys and Certificates for validating against a specific instance of Sigstore.