Open yxxchange opened 1 year ago
@ElonMuskkkkkk Try using glob: "registry.cn-hangzhou.aliyuncs.com/fckc/sigstore-test**"
instead.
@ElonMuskkkkkk Try using
glob: "registry.cn-hangzhou.aliyuncs.com/fckc/sigstore-test**"
instead.
Based on my recent test, it seems that the image field in the CIP YAML can only be specified to a particular image but not to the image version. When I don't use a wildcard match and write the full image name and version together, it still fails. It's only when I remove the image version that I can use it properly.
@ElonMuskkkkkk If you specify the tag that won't match the final mutated image tag which is registry.cn-hangzhou.aliyuncs.com/fckc/sigstore-test@sha256:a094484855793fcb7ba16ad83816ca0fdfdf97f532a9a076b5b62fe6eda26136
. You could use registry.cn-hangzhou.aliyuncs.com/fckc/sigstore-test@sha256:a094484855793fcb7ba16ad83816ca0fdfdf97f532a9a076b5b62fe6eda26136
as part of the glob pattern if you really want to match a specific image digest. Or you could use image digests that include the image version.
Question
The relevant YAML configuration that I have set up is shown below. CIP yaml:
deployment yaml:
But I can't apply the deployment.yaml, The webhook prevented this action. Error is the following:
How to solve this problem.