Struct ImageSignature

pub struct ImageSignature {
    pub conditions: Option<Vec<SignatureCondition>>,
    pub content: ByteString,
    pub created: Option<Time>,
    pub image_identity: Option<String>,
    pub issued_by: Option<SignatureIssuer>,
    pub issued_to: Option<SignatureSubject>,
    pub metadata: ObjectMeta,
    pub signed_claims: Option<BTreeMap<String, String>>,
    pub type_: String,
}

ImageSignature holds a signature of an image. It allows to verify image identity and possibly other claims as long as the signature is trusted. Based on this information it is possible to restrict runnable images to those matching cluster-wide policy. Mandatory fields should be parsed by clients doing image verification. The others are parsed from signature’s content by the server. They serve just an informative purpose.

Fields

conditions: Option<Vec<SignatureCondition>>

Conditions represent the latest available observations of a signature’s current state.

content: ByteString

Required: An opaque binary string which is an image’s signature.

created: Option<Time>

If specified, it is the time of signature’s creation.

image_identity: Option<String>

A human readable string representing image’s identity. It could be a product name and version, or an image pull spec (e.g. “registry.access.redhat.com/rhel7/rhel:7.2”).

issued_by: Option<SignatureIssuer>

If specified, it holds information about an issuer of signing certificate or key (a person or entity who signed the signing certificate or key).

issued_to: Option<SignatureSubject>

If specified, it holds information about a subject of signing certificate or key (a person or entity who signed the image).

metadata: ObjectMeta

Standard object’s metadata.

signed_claims: Option<BTreeMap<String, String>>

Contains claims from the signature.

type_: String

Required: Describes a type of stored blob.

Implementations

impl ImageSignature

pub fn create_image_signature( body: &ImageSignature, optional: CreateOptional<'_>, ) -> Result<(Request<Vec<u8>>, fn(StatusCode) -> ResponseBody<CreateResponse<Self>>), RequestError>

create an ImageSignature

Use the returned k8s_openapi::ResponseBody<k8s_openapi::CreateResponse<Self>> constructor, or k8s_openapi::CreateResponse<Self> directly, to parse the HTTP response.

Arguments

• body

• optional

  Optional parameters. Use Default::default() to not pass any.

impl ImageSignature

pub fn delete_image_signature( name: &str, optional: DeleteOptional<'_>, ) -> Result<(Request<Vec<u8>>, fn(StatusCode) -> ResponseBody<DeleteResponse<Self>>), RequestError>

delete an ImageSignature

Use the returned k8s_openapi::ResponseBody<k8s_openapi::DeleteResponse<Self>> constructor, or k8s_openapi::DeleteResponse<Self> directly, to parse the HTTP response.

Arguments

• name

  name of the ImageSignature

• optional

  Optional parameters. Use Default::default() to not pass any.

Trait Implementations

impl Clone for ImageSignature

fn clone(&self) -> ImageSignature

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ImageSignature

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ImageSignature

fn default() -> ImageSignature

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ImageSignature

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Metadata for ImageSignature

type Ty = ObjectMeta

The type of the metadata object.

fn metadata(&self) -> &<Self as Metadata>::Ty

Gets a reference to the metadata of this resource value.

fn metadata_mut(&mut self) -> &mut <Self as Metadata>::Ty

Gets a mutable reference to the metadata of this resource value.

impl PartialEq for ImageSignature

fn eq(&self, other: &ImageSignature) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Resource for ImageSignature

const API_VERSION: &'static str = "image.openshift.io/v1"

The API version of the resource. This is a composite of Resource::GROUP and Resource::VERSION (eg "apiextensions.k8s.io/v1beta1") or just the version for resources without a group (eg "v1").

const GROUP: &'static str = "image.openshift.io"

The group of the resource, or the empty string if the resource doesn’t have a group.

const KIND: &'static str = "ImageSignature"

The kind of the resource.

const VERSION: &'static str = "v1"

The version of the resource.

impl Serialize for ImageSignature

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ImageSignature