init

templates/policy.json.j2

@@ -0,0 +1,37 @@
+{
+    "default": [
+        {
+            "type": "{{ podman_policy_default_type }}"
+        }
+    ],
+    "transports": {
+        "docker-daemon": {
+            "": [
+                {
+                    "type": "insecureAcceptAnything"
+                }
+            ]
+        },
+        "docker": {
+{% for registry in podman_policy_trusted_registries %}
+            "{{ registry.registry }}": [
+                {
+                    "type": "{{ registry.type }}"{% if registry.keyPath is defined %},
+                    "keyType": "{{ registry.keyType | default('GPGKeys') }}",
+                    "keyPath": "{{ registry.keyPath }}"{% endif %}{% if registry.keyData is defined %},
+                    "keyType": "{{ registry.keyType | default('GPGKeys') }}",
+                    "keyData": "{{ registry.keyData }}"{% endif %}{% if registry.signedIdentity is defined %},
+                    "signedIdentity": {{ registry.signedIdentity | to_json }}{% endif %}
+                }
+            ]{% if not loop.last %},{% endif %}
+{% endfor %}
+{% if podman_policy_reject_unknown_registries %}
+            "": [
+                {
+                    "type": "reject"
+                }
+            ]
+{% endif %}
+        }
+    }
+}