Files
awoooi/config/security/runtime-image-mirror-policy.json

90 lines
4.4 KiB
JSON

{
"schema_version": "awoooi_runtime_image_mirror_policy_v1",
"work_item_id": "AIA-P0-006-02A",
"risk_level": "high",
"source_contract": {
"origin": "runtime_cache_only",
"external_pull_allowed": false,
"cache_host": "192.168.0.120",
"cache_user": "wooo",
"platform": "linux/amd64"
},
"target_contract": {
"push_registry_prefix": "registry.wooo.work/awoooi/runtime-mirror/",
"runtime_registry_prefix": "192.168.0.110:5000/awoooi/runtime-mirror/",
"digest_pin_required": true
},
"images": [
{
"asset_id": "runtime-image:argocd-dex",
"source_index_digest": "sha256:b08a58c9731c693b8db02154d7afda798e1888dc76db30d34c4a0d0b8a26d913",
"platform_digest": "sha256:351f51387f9c781764491280ec6528ffbfd121a643660514518b4baf07caf5ca",
"target_registry_digest": "sha256:4bc739d387153ce0a8bdf0f36e6696e1233b0da4a96968d13230a9aea831b884",
"push_ref": "registry.wooo.work/awoooi/runtime-mirror/dex:v2.43.0-linux-amd64",
"runtime_ref": "192.168.0.110:5000/awoooi/runtime-mirror/dex@sha256:4bc739d387153ce0a8bdf0f36e6696e1233b0da4a96968d13230a9aea831b884",
"workload": {
"kind": "deployment",
"namespace": "argocd",
"name": "argocd-dex-server",
"container": "dex"
}
},
{
"asset_id": "runtime-image:kured",
"source_index_digest": "sha256:2c5d73bb4517a269def38a6cd54d34d82be81793bea9ff1bb35c6533515ad209",
"platform_digest": "sha256:47cc7f1be3ce19f64a2153849e3e43859c80f4a92cbddc789026ea369e8f9243",
"target_registry_digest": "sha256:70fe8ceeef3f93319619062de2e0c6d5cce9c4f8687b90c1841e0c96f486ab1d",
"push_ref": "registry.wooo.work/awoooi/runtime-mirror/kured:v1.15.1-linux-amd64",
"runtime_ref": "192.168.0.110:5000/awoooi/runtime-mirror/kured@sha256:70fe8ceeef3f93319619062de2e0c6d5cce9c4f8687b90c1841e0c96f486ab1d",
"workload": {
"kind": "daemonset",
"namespace": "kured",
"name": "kured",
"container": "kured"
}
},
{
"asset_id": "runtime-image:event-exporter",
"source_index_digest": "sha256:8abb52b66557d3333f9e473e0eff2951309abfd018bd8d7fcfd86c4ecce6b9cf",
"platform_digest": "sha256:36e5ce64dad3d22426c1e7a0f1dd5d5ae0e9ff53aa86e6bcf7429d483582a317",
"target_registry_digest": "sha256:d90516e5a8277a725867df3e1d084fe6533c63c49bc527696f45dc2e6d7d7ddb",
"push_ref": "registry.wooo.work/awoooi/runtime-mirror/event-exporter:v1.7-linux-amd64",
"runtime_ref": "192.168.0.110:5000/awoooi/runtime-mirror/event-exporter@sha256:d90516e5a8277a725867df3e1d084fe6533c63c49bc527696f45dc2e6d7d7ddb",
"workload": {
"kind": "deployment",
"namespace": "observability",
"name": "event-exporter",
"container": "event-exporter"
}
},
{
"asset_id": "runtime-image:kube-state-metrics",
"source_index_digest": "sha256:af8220f534938de121a694cb7314313a6195c9d494fc30bfa6885b08a276bb82",
"platform_digest": "sha256:50502264dbee17136b48d19404ce40d6e57ef9d38aafd95ceb1d977cc92e9519",
"target_registry_digest": "sha256:de7f1c00cc352d86db81aa80b6c75066a1de0c39837548b8c250865dc466820f",
"push_ref": "registry.wooo.work/awoooi/runtime-mirror/kube-state-metrics:v2.10.1-linux-amd64",
"runtime_ref": "192.168.0.110:5000/awoooi/runtime-mirror/kube-state-metrics@sha256:de7f1c00cc352d86db81aa80b6c75066a1de0c39837548b8c250865dc466820f",
"workload": {
"kind": "deployment",
"namespace": "kube-state-metrics",
"name": "kube-state-metrics",
"container": "kube-state-metrics"
}
},
{
"asset_id": "runtime-image:node-problem-detector",
"source_index_digest": "sha256:a510d7d95d071fa901bf71b10e6c7df3e8361c8383b5cf792e97a3e36dee80b8",
"platform_digest": "sha256:0f75bc8c9e1c6d436f3b18927aa866aea68bb4213cb399c5b2507f1adde212b8",
"target_registry_digest": "sha256:24d60a21b81f9d8ab6174c0f7c7e13efaa04e57601ddd94c34b3dc5861096b7a",
"push_ref": "registry.wooo.work/awoooi/runtime-mirror/node-problem-detector:v0.8.17-linux-amd64",
"runtime_ref": "192.168.0.110:5000/awoooi/runtime-mirror/node-problem-detector@sha256:24d60a21b81f9d8ab6174c0f7c7e13efaa04e57601ddd94c34b3dc5861096b7a",
"workload": {
"kind": "daemonset",
"namespace": "node-problem-detector",
"name": "node-problem-detector",
"container": "node-problem-detector"
}
}
]
}