Image reflector API reference

Order specifies the sorting order of the tags. Given the letters of the alphabet as tags, ascending order would select Z, and descending order would select A.

SemVer gives a semantic version range to check against the tags available.

Alphabetical set of rules to use for alphabetical ordering of the tags.

Numerical set of rules to use for numerical ordering of the tags.

ImageRepositoryRef points at the object specifying the image being scanned

Policy gives the particulars of the policy to be followed in selecting the most recent image

FilterTags enables filtering for only a subset of tags based on a set of rules. If no rules are provided, all the tags from the repository will be ordered and compared.

LatestImage gives the first in the list of images scanned by the image repository, when filtered and ordered according to the policy.

ObservedPreviousImage is the observed previous LatestImage. It is used to keep track of the previous and current images.

Image is the name of the image repository

Interval is the length of time to wait between scans of the image repository.

Timeout for image scanning. Defaults to ‘Interval’ duration.

SecretRef can be given the name of a secret containing credentials to use for the image registry. The secret should be created with kubectl create secret docker-registry, or the equivalent.

ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate the image pull if the service account has attached pull secrets.

CertSecretRef can be given the name of a secret containing either or both of

• a PEM-encoded client certificate (certFile) and private key (keyFile);
• a PEM-encoded CA certificate (caFile)

and whichever are supplied, will be used for connecting to the registry. The client cert and key are useful if you are authenticating with a certificate; the CA cert is useful if you are using a self-signed server certificate.

This flag tells the controller to suspend subsequent image scans. It does not apply to already started scans. Defaults to false.

AccessFrom defines an ACL for allowing cross-namespace references to the ImageRepository object based on the caller’s namespace labels.

ExclusionList is a list of regex strings used to exclude certain tags from being stored in the database.

The provider used for authentication, can be ‘aws’, ‘azure’, ‘gcp’ or ‘generic’. When not specified, defaults to ‘generic’.

ObservedGeneration is the last reconciled generation.

CanonicalName is the name of the image repository with all the implied bits made explicit; e.g., docker.io/library/alpine rather than alpine.

LastScanResult contains the number of fetched tags.

ObservedExclusionList is a list of observed exclusion list. It reflects the exclusion rules used for the observed scan result in spec.lastScanResult.

(Members of ReconcileRequestStatus are embedded into this type.)

Order specifies the sorting order of the tags. Given the integer values from 0 to 9 as tags, ascending order would select 9, and descending order would select 0.

Range gives a semver range for the image tag; the highest version within the range that’s a tag yields the latest image.

Pattern specifies a regular expression pattern used to filter for image tags.

Extract allows a capture group to be extracted from the specified regular expression pattern, useful before tag evaluation.