[zh] sync blog: 2023-06-29-container-image-signature-verification

windsonsea · windsonsea · commit a54e5763343c · 2023-07-11T20:27:48.000+08:00
diff --git a/content/zh-cn/blog/_posts/2023-06-29-container-image-signature-verification/flow.mmd b/content/zh-cn/blog/_posts/2023-06-29-container-image-signature-verification/flow.mmd
@@ -0,0 +1,6 @@
+flowchart TD
+    A(创建策略\n实例) -->|命名空间添加注解\n以验证签名| B(创建 Pod)
+    B --> C{策略评估}
+    C --> |合格| D[fa:fa-check 允许]
+    C --> |失败| E[fa:fa-xmark 不允许]
+    D --> |需要时| F[镜像拉取]
diff --git a/content/zh-cn/blog/_posts/2023-06-29-container-image-signature-verification/flow.svg b/content/zh-cn/blog/_posts/2023-06-29-container-image-signature-verification/flow.svg
@@ -0,0 +1 @@
+<svg aria-roledescription="flowchart-v2" role="graphics-document document" viewBox="-8 -8 283.8699951171875 664.2999877929688" xmlns="http://www.w3.org/2000/svg" height="700px" id="graph-div" xmlns:xlink="http://www.w3.org/1999/xlink"><style>@import url("https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css");'</style><style>#graph-div{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;fill:#333;}#graph-div .error-icon{fill:#552222;}#graph-div .error-text{fill:#552222;stroke:#552222;}#graph-div .edge-thickness-normal{stroke-width:2px;}#graph-div .edge-thickness-thick{stroke-width:3.5px;}#graph-div .edge-pattern-solid{stroke-dasharray:0;}#graph-div .edge-pattern-dashed{stroke-dasharray:3;}#graph-div .edge-pattern-dotted{stroke-dasharray:2;}#graph-div .marker{fill:#333333;stroke:#333333;}#graph-div .marker.cross{stroke:#333333;}#graph-div svg{font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:16px;}#graph-div .label{font-family:"trebuchet ms",verdana,arial,sans-serif;color:#333;}#graph-div .cluster-label text{fill:#333;}#graph-div .cluster-label span,#graph-div p{color:#333;}#graph-div .label text,#graph-div span,#graph-div p{fill:#333;color:#333;}#graph-div .node rect,#graph-div .node circle,#graph-div .node ellipse,#graph-div .node polygon,#graph-div .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#graph-div .flowchart-label text{text-anchor:middle;}#graph-div .node .label{text-align:center;}#graph-div .node.clickable{cursor:pointer;}#graph-div .arrowheadPath{fill:#333333;}#graph-div .edgePath .path{stroke:#333333;stroke-width:2.0px;}#graph-div .flowchart-link{stroke:#333333;fill:none;}#graph-div .edgeLabel{background-color:#e8e8e8;text-align:center;}#graph-div .edgeLabel rect{opacity:0.5;background-color:#e8e8e8;fill:#e8e8e8;}#graph-div .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#graph-div .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#graph-div .cluster text{fill:#333;}#graph-div .cluster span,#graph-div p{color:#333;}#graph-div div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:"trebuchet ms",verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#graph-div .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#graph-div :root{--mermaid-font-family:"trebuchet ms",verdana,arial,sans-serif;}</style><g><marker orient="auto" markerHeight="12" markerWidth="12" markerUnits="userSpaceOnUse" refY="5" refX="10" viewBox="0 0 10 10" class="marker flowchart" id="flowchart-pointEnd"><path style="stroke-width: 1; stroke-dasharray: 1, 0;" class="arrowMarkerPath" d="M 0 0 L 10 5 L 0 10 z"></path></marker><marker orient="auto" markerHeight="12" markerWidth="12" markerUnits="userSpaceOnUse" refY="5" refX="0" viewBox="0 0 10 10" class="marker flowchart" id="flowchart-pointStart"><path style="stroke-width: 1; stroke-dasharray: 1, 0;" class="arrowMarkerPath" d="M 0 5 L 10 10 L 10 0 z"></path></marker><marker orient="auto" markerHeight="11" markerWidth="11" markerUnits="userSpaceOnUse" refY="5" refX="11" viewBox="0 0 10 10" class="marker flowchart" id="flowchart-circleEnd"><circle style="stroke-width: 1; stroke-dasharray: 1, 0;" class="arrowMarkerPath" r="5" cy="5" cx="5"></circle></marker><marker orient="auto" markerHeight="11" markerWidth="11" markerUnits="userSpaceOnUse" refY="5" refX="-1" viewBox="0 0 10 10" class="marker flowchart" id="flowchart-circleStart"><circle style="stroke-width: 1; stroke-dasharray: 1, 0;" class="arrowMarkerPath" r="5" cy="5" cx="5"></circle></marker><marker orient="auto" markerHeight="11" markerWidth="11" markerUnits="userSpaceOnUse" refY="5.2" refX="12" viewBox="0 0 11 11" class="marker cross flowchart" id="flowchart-crossEnd"><path style="stroke-width: 2; stroke-dasharray: 1, 0;" class="arrowMarkerPath" d="M 1,1 l 9,9 M 10,1 l -9,9"></path></marker><marker orient="auto" markerHeight="11" markerWidth="11" markerUnits="userSpaceOnUse" refY="5.2" refX="-1" viewBox="0 0 11 11" class="marker cross flowchart" id="flowchart-crossStart"><path style="stroke-width: 2; stroke-dasharray: 1, 0;" class="arrowMarkerPath" d="M 1,1 l 9,9 M 10,1 l -9,9"></path></marker><g class="root"><g class="clusters"></g><g class="edgePaths"><path marker-end="url(#flowchart-pointEnd)" style="fill:none;" class="edge-thickness-normal edge-pattern-solid flowchart-link LS-A LE-B" id="L-A-B-0" d="M127.32250022888184,63L127.32250022888184,71.16666666666667C127.32250022888184,79.33333333333333,127.32250022888184,95.66666666666667,127.32250022888184,112C127.32250022888184,128.33333333333334,127.32250022888184,144.66666666666666,127.32250022888184,152.83333333333334L127.32250022888184,161"></path><path marker-end="url(#flowchart-pointEnd)" style="fill:none;" class="edge-thickness-normal edge-pattern-solid flowchart-link LS-B LE-C" id="L-B-C-0" d="M127.32250022888184,200L127.32250022888184,204.16666666666666C127.32250022888184,208.33333333333334,127.32250022888184,216.66666666666666,127.40583356221516,225.0833339691162C127.48916689554851,233.50000127156576,127.65583356221516,242.0000025431315,127.73916689554851,246.2500031789144L127.82250022888182,250.50000381469727"></path><path marker-end="url(#flowchart-pointEnd)" style="fill:none;" class="edge-thickness-normal edge-pattern-solid flowchart-link LS-C LE-D" id="L-C-D-0" d="M94.03408152116836,389.01158052934716L86.33756785801302,400.7263176164156C78.64105419485769,412.44105470348404,63.24802686854701,435.8705288776209,55.551513205391664,453.75193263135606C47.85499954223633,471.6333363850911,47.85499954223633,483.9666697184245,47.85499954223633,490.1333363850911L47.85499954223633,496.3000030517578"></path><path marker-end="url(#flowchart-pointEnd)" style="fill:none;" class="edge-thickness-normal edge-pattern-solid flowchart-link LS-C LE-E" id="L-C-E-0" d="M161.61091594431227,389.01157589223556L169.14076343951479,400.72631375215593C176.6706109347173,412.4410516120763,191.73030592512234,435.8705273319171,199.26015342032483,453.7519318585041C206.79000091552734,471.6333363850911,206.79000091552734,483.9666697184245,206.79000091552734,490.1333363850911L206.79000091552734,496.3000030517578"></path><path marker-end="url(#flowchart-pointEnd)" style="fill:none;" class="edge-thickness-normal edge-pattern-solid flowchart-link LS-D LE-F" id="L-D-F-0" d="M47.85499954223633,535.3000030517578L47.85499954223633,541.4666697184244C47.85499954223633,547.6333363850912,47.85499954223633,559.9666697184244,47.85499954223633,572.3000030517578C47.85499954223633,584.6333363850912,47.85499954223633,596.9666697184244,47.85499954223633,603.1333363850912L47.85499954223633,609.3000030517578"></path></g><g class="edgeLabels"><g transform="translate(127.32250022888184, 112)" class="edgeLabel"><g transform="translate(-75.60499572753906, -24)" class="label"><foreignObject height="48" width="151.20999145507812"><div style="display: inline-block; white-space: nowrap;" xmlns="http://www.w3.org/1999/xhtml"><span class="edgeLabel">annotate namespace<br/>to validate signatures</span></div></foreignObject></g></g><g class="edgeLabel"><g transform="translate(0, 0)" class="label"><foreignObject height="0" width="0"><div style="display: inline-block; white-space: nowrap;" xmlns="http://www.w3.org/1999/xhtml"><span class="edgeLabel"></span></div></foreignObject></g></g><g transform="translate(47.85499954223633, 459.3000030517578)" class="edgeLabel"><g transform="translate(-16.899999618530273, -12)" class="label"><foreignObject height="24" width="33.79999923706055"><div style="display: inline-block; white-space: nowrap;" xmlns="http://www.w3.org/1999/xhtml"><span class="edgeLabel">pass</span></div></foreignObject></g></g><g transform="translate(206.79000091552734, 459.3000030517578)" class="edgeLabel"><g transform="translate(-10.229999542236328, -12)" class="label"><foreignObject height="24" width="20.459999084472656"><div style="display: inline-block; white-space: nowrap;" xmlns="http://www.w3.org/1999/xhtml"><span class="edgeLabel">fail</span></div></foreignObject></g></g><g transform="translate(47.85499954223633, 572.3000030517578)" class="edgeLabel"><g transform="translate(-42.68499755859375, -12)" class="label"><foreignObject height="24" width="85.3699951171875"><div style="display: inline-block; white-space: nowrap;" xmlns="http://www.w3.org/1999/xhtml"><span class="edgeLabel">if necessary</span></div></foreignObject></g></g></g><g class="nodes"><g transform="translate(127.32250022888184, 31.5)" id="flowchart-A-40" class="node default default flowchart-label"><rect height="63" width="110.1500015258789" y="-31.5" x="-55.07500076293945" ry="5" rx="5" style="" class="basic label-container"></rect><g transform="translate(-47.57500076293945, -24)" style="" class="label"><rect></rect><foreignObject height="48" width="95.1500015258789"><div style="display: inline-block; white-space: nowrap;" xmlns="http://www.w3.org/1999/xhtml"><span class="nodeLabel">Create Policy<br/>instance</span></div></foreignObject></g></g><g transform="translate(127.32250022888184, 180.5)" id="flowchart-B-41" class="node default default flowchart-label"><rect height="39" width="95.93999481201172" y="-19.5" x="-47.96999740600586" ry="5" rx="5" style="" class="basic label-container"></rect><g transform="translate(-40.46999740600586, -12)" style="" class="label"><rect></rect><foreignObject height="24" width="80.93999481201172"><div style="display: inline-block; white-space: nowrap;" xmlns="http://www.w3.org/1999/xhtml"><span class="nodeLabel">Create Pod</span></div></foreignObject></g></g><g transform="translate(127.32250022888184, 336.1500015258789)" id="flowchart-C-43" class="node default default flowchart-label"><polygon style="" transform="translate(-86.14999771118164,86.14999771118164)" class="label-container" points="86.14999771118164,0 172.29999542236328,-86.14999771118164 86.14999771118164,-172.29999542236328 0,-86.14999771118164"></polygon><g transform="translate(-59.14999771118164, -12)" style="" class="label"><rect></rect><foreignObject height="24" width="118.29999542236328"><div style="display: inline-block; white-space: nowrap;" xmlns="http://www.w3.org/1999/xhtml"><span class="nodeLabel">policy evaluation</span></div></foreignObject></g></g><g transform="translate(47.85499954223633, 515.8000030517578)" id="flowchart-D-45" class="node default default flowchart-label"><rect height="39" width="95.70999908447266" y="-19.5" x="-47.85499954223633" ry="0" rx="0" style="" class="basic label-container"></rect><g transform="translate(-40.35499954223633, -12)" style="" class="label"><rect></rect><foreignObject height="24" width="80.70999908447266"><div style="display: inline-block; white-space: nowrap;" xmlns="http://www.w3.org/1999/xhtml"><span class="nodeLabel"><i class="fa fa-check"></i> Admitted</span></div></foreignObject></g></g><g transform="translate(206.79000091552734, 515.8000030517578)" id="flowchart-E-47" class="node default default flowchart-label"><rect height="39" width="122.15999603271484" y="-19.5" x="-61.07999801635742" ry="0" rx="0" style="" class="basic label-container"></rect><g transform="translate(-53.57999801635742, -12)" style="" class="label"><rect></rect><foreignObject height="24" width="107.15999603271484"><div style="display: inline-block; white-space: nowrap;" xmlns="http://www.w3.org/1999/xhtml"><span class="nodeLabel"><i class="fa fa-xmark"></i> Not admitted</span></div></foreignObject></g></g><g transform="translate(47.85499954223633, 628.8000030517578)" id="flowchart-F-49" class="node default default flowchart-label"><rect height="39" width="90.5999984741211" y="-19.5" x="-45.29999923706055" ry="0" rx="0" style="" class="basic label-container"></rect><g transform="translate(-37.79999923706055, -12)" style="" class="label"><rect></rect><foreignObject height="24" width="75.5999984741211"><div style="display: inline-block; white-space: nowrap;" xmlns="http://www.w3.org/1999/xhtml"><span class="nodeLabel">Image Pull</span></div></foreignObject></g></g></g></g></g></svg>
diff --git a/content/zh-cn/blog/_posts/2023-06-29-container-image-signature-verification/index.md b/content/zh-cn/blog/_posts/2023-06-29-container-image-signature-verification/index.md
