Struct bollard::secret::RegistryServiceConfig

pub struct RegistryServiceConfig {
    pub allow_nondistributable_artifacts_cid_rs: Option<Vec<String>>,
    pub allow_nondistributable_artifacts_hostnames: Option<Vec<String>>,
    pub insecure_registry_cid_rs: Option<Vec<String>>,
    pub index_configs: Option<HashMap<String, IndexInfo>>,
    pub mirrors: Option<Vec<String>>,
}

RegistryServiceConfig stores daemon registry services configuration.

Fields

allow_nondistributable_artifacts_cid_rs: Option<Vec<String>>

List of IP ranges to which nondistributable artifacts can be pushed, using the CIDR syntax RFC 4632. Some images (for example, Windows base images) contain artifacts whose distribution is restricted by license. When these images are pushed to a registry, restricted artifacts are not included. This configuration override this behavior, and enables the daemon to push nondistributable artifacts to all registries whose resolved IP address is within the subnet described by the CIDR syntax. This option is useful when pushing images containing nondistributable artifacts to a registry on an air-gapped network so hosts on that network can pull the images without connecting to another server. > Warning: Nondistributable artifacts typically have restrictions > on how and where they can be distributed and shared. Only use this > feature to push artifacts to private registries and ensure that you > are in compliance with any terms that cover redistributing > nondistributable artifacts.

allow_nondistributable_artifacts_hostnames: Option<Vec<String>>

List of registry hostnames to which nondistributable artifacts can be pushed, using the format <hostname>[:<port>] or <IP address>[:<port>]. Some images (for example, Windows base images) contain artifacts whose distribution is restricted by license. When these images are pushed to a registry, restricted artifacts are not included. This configuration override this behavior for the specified registries. This option is useful when pushing images containing nondistributable artifacts to a registry on an air-gapped network so hosts on that network can pull the images without connecting to another server. > Warning: Nondistributable artifacts typically have restrictions > on how and where they can be distributed and shared. Only use this > feature to push artifacts to private registries and ensure that you > are in compliance with any terms that cover redistributing > nondistributable artifacts.

insecure_registry_cid_rs: Option<Vec<String>>

List of IP ranges of insecure registries, using the CIDR syntax (RFC 4632). Insecure registries accept un-encrypted (HTTP) and/or untrusted (HTTPS with certificates from unknown CAs) communication. By default, local registries (127.0.0.0/8) are configured as insecure. All other registries are secure. Communicating with an insecure registry is not possible if the daemon assumes that registry is secure. This configuration override this behavior, insecure communication with registries whose resolved IP address is within the subnet described by the CIDR syntax. Registries can also be marked insecure by hostname. Those registries are listed under IndexConfigs and have their Secure field set to false. > Warning: Using this option can be useful when running a local > registry, but introduces security vulnerabilities. This option > should therefore ONLY be used for testing purposes. For increased > security, users should add their CA to their system’s list of trusted > CAs instead of enabling this option.

index_configs: Option<HashMap<String, IndexInfo>>

mirrors: Option<Vec<String>>

List of registry URLs that act as a mirror for the official (docker.io) registry.

Trait Implementations

impl Clone for RegistryServiceConfig

fn clone(&self) -> RegistryServiceConfig

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RegistryServiceConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for RegistryServiceConfig

fn default() -> RegistryServiceConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RegistryServiceConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<RegistryServiceConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for RegistryServiceConfig

fn eq(&self, other: &RegistryServiceConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for RegistryServiceConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RegistryServiceConfig