File tree Expand file tree Collapse file tree 2 files changed +55
-0
lines changed
src/confcom/azext_confcom Expand file tree Collapse file tree 2 files changed +55
-0
lines changed Original file line number Diff line number Diff line change @@ -3504,3 +3504,15 @@ neon postgres organization:
35043504neon postgres project :
35053505 rule_exclusions :
35063506 - require_wait_command_if_no_wait
3507+
3508+ confcom fragment push :
3509+ parameters :
3510+ signed_fragment :
3511+ rule_exclusions :
3512+ - no_positional_parameters
3513+
3514+ confcom fragment attach :
3515+ parameters :
3516+ signed_fragment :
3517+ rule_exclusions :
3518+ - no_positional_parameters
Original file line number Diff line number Diff line change 278278 - name: Input a Kubernetes YAML file with a custom containerd socket path
279279 text: az confcom katapolicygen --yaml "./pod.json" --containerd-pull --containerd-socket-path "/my/custom/containerd.sock"
280280"""
281+
282+ helps [
283+ "confcom fragment"
284+ ] = """
285+ type: group
286+ short-summary: Commands to handle Confidential Container Policy Fragments.
287+ """
288+
289+ helps [
290+ "confcom fragment push"
291+ ] = """
292+ type: command
293+ short-summary: Push a Confidential Container Policy Fragment to an ORAS registry
294+
295+ parameters:
296+ - name: --manifest-tag
297+ type: string
298+ short-summary: 'The reference to push the signed fragment to'
299+
300+ examples:
301+ - name: Push a signed fragment to a registry
302+ text: az confcom fragment push ./fragment.reg.cose --manifest-tag myregistry.azurecr.io/fragment:latest
303+ - name: Push the output of acifragmentgen to a registry
304+ text: az confcom acifragmentgen --chain my.cert.pem --key my_key.pem --svn "1" --namespace contoso --feed "test-feed" --input ./fragment_spec.json | az confcom fragment push --manifest-tag myregistry.azurecr.io/fragment:latest
305+ """
306+
307+ helps [
308+ "confcom fragment attach"
309+ ] = """
310+ type: command
311+ short-summary: Attach a Confidential Container Policy Fragment to an image in an ORAS registry.
312+
313+ parameters:
314+ - name: --manifest-tag
315+ type: string
316+ short-summary: 'The reference to attach the signed fragment to'
317+
318+ examples:
319+ - name: Attach a signed fragment to a registry
320+ text: az confcom fragment attach ./fragment.reg.cose --manifest-tag myregistry.azurecr.io/image:latest
321+ - name: Attach the output of acifragmentgen to a registry
322+ text: az confcom acifragmentgen --chain my.cert.pem --key my_key.pem --svn "1" --namespace contoso --feed "test-feed" --input ./fragment_spec.json | az confcom fragment attach --manifest-tag myregistry.azurecr.io/image:latest
323+ """
You can’t perform that action at this time.
0 commit comments