levis/help365
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update help elma

Browse Source
This commit is contained in:
koziavin
2025-05-27 21:32:35 +04:00
parent a6b05d6789
commit 898b22bf32
4500 changed files with 89372 additions and 120699 deletions
Download Patch File Download Diff File Expand all files Collapse all files

195
platform/docker-image-verification-policy.html
View File

@ -1,20 +1,19 @@
<!DOCTYPE html>
<html lang="ru">
<html lang="en">
<head>
<title>Политика проверки подписей Docker-образов</title>
<title>Signature verification policy for Docker images</title>
<meta name="generator" content="Help+Manual" />
<meta name="keywords" content="" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="description" content="Политика применяется, когда необходимо убедиться, что изображение находится у доверенного издателя, и в него не вносились изменения. Подписывание Docker-образов — это процесс,..." />
<meta name="description" content="The policy applies when it is necessary to ensure that the image is owned by a trusted publisher and has not been modified. Signing Docker images is a process to ensure their..." />
<meta name="picture" content="" />
<meta property="og:type" content="website" />
<meta property="og:title" content="Cправка по Low-code платформе ELMA365" />
<meta property="og:url" content="https://elma365.com/ru/help" />
<meta property="og:image" content="" />
<meta property="og:site_name" content="ELMA365" />
<meta property="og:title" content="Full documentation for BRIX365 platform. Low-code developer guide. User guide. Admin guide. Developer guide." />
<meta property="og:url" content="https://brix365.com/en/help" />
<meta property="og:image" content="" />
<link rel="icon" href="favicon.png" type="image/png" />
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
@ -24,7 +23,6 @@
<link rel="stylesheet" href="./article.css" />
<link rel="stylesheet" href="./glossary.css" />
<link rel="stylesheet" href="./theme.css" />
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="helpman_settings.js"></script>
<script type="text/javascript" src="helpman_topicinit.js"></script>
@ -36,16 +34,16 @@
</head>
<body>
<script async src="https://www.googletagmanager.com/gtag/js?id=G-M6ETBEC1R9"></script><script>window.dataLayer=window.dataLayer || []; function gtag(){dataLayer.push(arguments);}gtag('js', new Date()); gtag('config', 'G-M6ETBEC1R9');</script>
<script>!function(e,t,c,n,r,a,m){e.ym=e.ym||function(){(e.ym.a=e.ym.a||[]).push(arguments)},e.ym.l=1*new Date;for(var s=0;s<document.scripts.length;s++)if(document.scripts[s].src===n)return;a=t.createElement(c),m=t.getElementsByTagName(c)[0],a.async=1,a.src=n,m.parentNode.insertBefore(a,m)}(window,document,"script","https://mc.yandex.ru/metrika/tag.js"),ym(83179930,"init",{clickmap:!0,trackLinks:!0,accurateTrackBounce:!0,webvisor:!0})</script><noscript><div><img alt=""src=https://mc.yandex.ru/watch/83179930 style=position:absolute;left:-9999px></div></noscript>
<header class="header elma-365">
<div class="container">
<a class="header__logo" href="https://elma365.com/ru/help">
<img src="./logo.svg" alt="header logo">
<a class="header__logo" href="https://brix365.com/en/help">
<img src="./logo-en.svg" alt="header logo">
</a>
<!-- <div class="hero__search-form" id="search-panel">
<form class="search-form" onsubmit="ym(83179930,'reachGoal','poisk')">
<form class="search-form" onsubmit="ym(83180416,'reachGoal','poisk')">
<label class="search-form__label">
<span id="reset-search" class="search__icon"></span>
<input class="search-form__input" type="text">
@ -65,7 +63,7 @@
</div>
<div class="header__navi">
<ul class="header__list"><li><span class="solution-select"><span class="solution-select__selected"></span><svg width="7" height="4" viewBox="0 0 7 4" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1 1L3.5 3.5L6 1" stroke="white" stroke-linecap="round" stroke-linejoin="round"/></svg><ul class="solution-select__list"><li><a class="project-link" href="https://elma365.com/ru/help/platform/get-trial.html">Платформа</a></li><li><a class="project-link" href="https://elma365.com/ru/help/ecm/ecm-functions.html">ECM</a></li><li><a class="project-link" href="https://elma365.com/ru/help/crm/crm_overview.html">CRM</a></li><li><a class="project-link" href="https://elma365.com/ru/help/service/service-functions.html">Service</a></li><li><a class="project-link" href="https://elma365.com/ru/help/projects/projects-functions.html">Проекты</a></li><li><a class="project-link" href="https://elma365.com/ru/help/business_solutions/-elma365-store.html">Бизнес-решения</a></li></ul></span></li><li><a href="https://api.elma365.com/ru/"target="_blank">API</a></li><li><a href="https://tssdk.elma365.com/"target="_blank">SDK</a></li><li><a href="https://community.elma365.com/" target="_blank">Community</a></li><li><a href="https://elma-academy.com/ru/" target="_blank">Академия</a></li><li><a href="https://elma365.com/ru/" target="_blank">Сайт ELMA365</a></li></ul>
<ul class="header__list"><li><span class="solution-select"><span class="solution-select__selected"></span><svg width="7" height="4" viewBox="0 0 7 4" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1 1L3.5 3.5L6 1" stroke="white" stroke-linecap="round" stroke-linejoin="round"/></svg><ul class="solution-select__list"><li><a class="project-link" href="https://brix365.com/en/help/platform/get-trial.html">Platform</a></li><li><a class="project-link" href="https://brix365.com/en/help/ecm/ecm-functions.html">ECM</a></li><li><a class="project-link" href="https://brix365.com/en/help/crm/crm_overview.html">CRM</a></li><li><a class="project-link" href="https://brix365.com/en/help/service/service-functions.html">Service</a></li><li><a class="project-link" href="https://brix365.com/en/help/projects/projects-functions.html">Projects</a></li><li><a class="project-link" href="https://brix365.com/en/help/business_solutions/-elma365-store.html">Business Solutions</a></li></ul></span></li><li><a href="https://api.brix365.com/en/" target="_blank">API</a></li><li><a href="https://tssdk.brix365.com/" target="_blank">SDK</a></li></ul>
</div>
@ -80,8 +78,8 @@
<aside class="sidebar" id="sidebar">
<div class="sidebar__header">
<a class="header__logo" href="https://elma365.com/ru/help">
<img src="./logo-light.svg">
<a class="header__logo" href="https://brix365.com/en/help">
<img src="./logo-light-en.svg">
</a>
<span class="sidebar__close elma-365-close" id="close"></span>
</div>
@ -94,15 +92,15 @@
<div class="article-inner">
<div class="content">
<header class="article__header">
<div class="article__bread" style="display:flex; gap:10px;">
<div class="article__bread" style="display:flex; gap:10px;">
<span id="subcategory" class="search-res__item-category search-res__item-category_subcategory subcategory article__badge"></span>
<div class="topic__breadcrumbs">
<p><a href="elma365-on-premises.html">ELMA365 On-Premises</a> &gt; <a href="elma365-enterprise.html">ELMA365 On-Premises Enterprise</a> &gt; Установка дополнений для приложения ELMA365 &gt; <a href="install-kyverno.html">Установка Kyverno</a> / Политика проверки подписей Docker-образов</p>
<p><a href="elma365-on-premises.html">BRIX On-Premises</a> &gt; <a href="elma365-enterprise.html">BRIX On-Premises Enterprise</a> &gt; Install add-on components for BRIX &gt; <a href="install-kyverno.html">Install Kyverno</a> / Signature verification policy for Docker images</p>
</div>
</div>
<div class="topic__title"><h1 class="p_Heading1"><span class="f_Heading1">Политика проверки подписей Docker-образов</span></h1>
<div class="topic__title"><h1 class="p_Heading1"><span class="f_Heading1">Signature verification policy for Docker images</span></h1>
</div>
</header>
@ -111,85 +109,75 @@
<a href="#h1-article" class="scroll-top"></a>
</div>
<!-- Placeholder for topic body. -->
<p class="p_Normal" style="background: #ffffff;">Политика применяется, когда необходимо убедиться, что изображение находится у доверенного издателя, и в него не вносились изменения. Подписывание Docker-образов — это процесс, обеспечивающий их подлинность и целостность. Это достигается путём добавления цифровой подписи к Docker-образу, которую можно проверить во время развертывания.</p>
<p style="text-align: justify; line-height: 1.20; margin: 7px 0 16px 0;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">The policy applies when it is necessary to ensure that the image is owned by a trusted publisher and has not been modified. Signing Docker images is a process to ensure their authenticity and consistency. This is accomplished by adding a digital signature to the Docker image that can be verified during deployment.</span></p>
<p class="p_CodeExample" style="page-break-inside: avoid;"><span class="f_CodeExample">начало&nbsp;внимание</span></p>
<p class="p_Normal">Политика будет доступна с версии ELMA365 On-Premises 2024.3.0</p>
<p style="text-align: justify; line-height: 1.20; margin: 7px 0 16px 0;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">The policy is available from BRIX On-Premises version 2024.3.0 on.</span></p>
<p class="p_CodeExample" style="page-break-inside: avoid;"><span class="f_CodeExample">конец&nbsp;внимание</span></p>
<p class="p_Normal">Для установки необходимо заполнить конфигурационный файл.</p>
<h2 class="p_Heading2"><a id="fill-in-config-file" class="hmanchor"></a><span class="f_Heading2">Заполнение конфигурационного файла</span></h2>
<p style="background: #ffffff; margin: 10px 0 0 0;">Заполните конфигурационный файл <code><b>values-kyverno.yaml</b></code> для установки Kyverno.</p>
<p style="text-align: justify; line-height: 1.20; margin: 7px 0 16px 0;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">The configuration file must be filled in for deployment.</span></p>
<h2 class="p_Heading2"><span class="f_Heading2" style="font-family: 'Times New Roman',Times,Georgia,serif;">Fill in the configuration file</span></h2>
<p style="text-align: justify; line-height: 1.20; background: #ffffff; margin: 10px 0 0 0;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">Fill in the </span><code><b>values-kyverno.yaml</b></code><span style="font-size: 13px; font-family: 'Times New Roman',Times,Georgia,serif;"> </span><span style="font-family: 'Times New Roman',Times,Georgia,serif;">configuration file to install Kyverno.</span></p>
<ol style="list-style-type:upper-roman">
<li value="1" style="background: #ffffff; margin-top: 10px; margin-right: 0; margin-bottom: 0;">Настройте политику проверки подписей Docker-образов. Политика выключена по умолчанию. Чтобы включить политику, в параметре <code><b>kyverno.checkImageSign.enabled</b></code><span style="font-weight: bold;"> </span>укажите значение <code><b>true</b></code>.</li><li value="2" style="background: #ffffff; margin-top: 10px; margin-right: 0; margin-bottom: 0;">Если в вашем кластере Kubernetes установлено несколько экземпляров приложения ELMA365 On-Premises, но проверку подписей Docker-образов нужно применить только к части экземпляров приложений ELMA365, заполните параметр <code><b>kyverno.checkImageSign.namespace</b></code>. В этом параметре указаваются <code><b>namespace</b></code><span style="font-weight: bold;"> </span>экземпляров приложения ELMA365.</li><li value="3" style="background: #ffffff; margin-top: 10px; margin-right: 0; margin-bottom: 0;">Укажите наименование <code><b>namespace</b></code> для сервиса Kyverno, в данной статье — <code><b>kyverno</b></code>. Для обеспечения высокой доступности задайте необходимое количество реплик в параметре <code><b>kyverno.replicaCount</b></code>.</li></ol>
<p class="p_CodeExample" style="page-break-inside: avoid;"><span class="f_CodeExample">#&nbsp;Настройки&nbsp;kyverno</span><br />
<li value="1" style="text-align: justify; line-height: 1.20; background: #ffffff; margin-top: 10px; margin-right: 0; margin-bottom: 0;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">Configure the signature verification policy for Docker images. The policy is disabled by default. To enable the policy, set </span><code><b>kyverno.checkImageSign.enabled</b></code><span style="font-size: 13px; font-family: 'Times New Roman',Times,Georgia,serif;"> </span><span style="font-family: 'Times New Roman',Times,Georgia,serif;">to </span><code><b>true</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">.</span></li><li value="2" style="text-align: justify; line-height: 1.20; background: #ffffff; margin-top: 10px; margin-right: 0; margin-bottom: 0;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">If you have multiple BRIX On-Premises application instances installed in your Kubernetes cluster, but you only want to apply signature verification for Docker images to a subset of BRIX application instances, fill in the </span><code><b>kyverno.checkImageSign.namespace</b></code><span style="font-size: 13px; font-family: 'Times New Roman',Times,Georgia,serif;"> </span><span style="font-family: 'Times New Roman',Times,Georgia,serif;">parameter. This parameter specifies the </span><span style="font-size: 13px; font-family: 'Courier New',Courier,monospace; font-weight: bold;">namespace</span><span style="font-size: 13px; font-family: 'Times New Roman',Times,Georgia,serif;"> </span><span style="font-family: 'Times New Roman',Times,Georgia,serif;">of the BRIX application instances.</span></li><li value="3" style="text-align: justify; line-height: 1.20; background: #ffffff; margin-top: 10px; margin-right: 0; margin-bottom: 0;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">Specify the namespace</span><span style="font-size: 13px; font-family: 'Times New Roman',Times,Georgia,serif;"> </span><span style="font-family: 'Times New Roman',Times,Georgia,serif;">for the Kyverno service: in this case, it is </span><code><b>kyverno</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">. To ensure high availability, specify the required number of replicas in the </span><code><b>kyverno.replicaCount</b></code><span style="font-size: 13px; font-family: 'Times New Roman',Times,Georgia,serif;"> </span><span style="font-family: 'Times New Roman',Times,Georgia,serif;">parameter.</span></li></ol>
<p class="p_CodeExample" style="page-break-inside: avoid;"><span class="f_CodeExample">#&nbsp;Configure&nbsp;kyverno</span><br />
<span class="f_CodeExample">kyverno:</span><br />
<span class="f_CodeExample">...</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;#&nbsp;политика&nbsp;проверки&nbsp;подписей&nbsp;Docker-образов</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;#&nbsp;signature&nbsp;verification&nbsp;policy&nbsp;for&nbsp;Docker&nbsp;images</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;checkImageSign:</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;enabled:&nbsp;false</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;список&nbsp;реестров,&nbsp;для&nbsp;которых&nbsp;будет&nbsp;применена&nbsp;политика&nbsp;подписей&nbsp;Docker-образов</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;list&nbsp;of&nbsp;registries&nbsp;for&nbsp;which&nbsp;the&nbsp;signature&nbsp;policy&nbsp;for&nbsp;Docker&nbsp;images&nbsp;will&nbsp;be&nbsp;applied</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;registry:</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-&nbsp;hub.elma365.tech</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;список&nbsp;namespace,&nbsp;в&nbsp;которых&nbsp;будет&nbsp;применена&nbsp;политика&nbsp;подписей&nbsp;Docker-образов</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;list&nbsp;of&nbsp;namespaces&nbsp;in&nbsp;which&nbsp;the&nbsp;signature&nbsp;policy&nbsp;for&nbsp;Docker&nbsp;images&nbsp;will&nbsp;be&nbsp;applied</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;namespace:</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;-&nbsp;elma365-dev</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;-&nbsp;elma365-prod</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;секрет&nbsp;для&nbsp;доступа&nbsp;к&nbsp;Docker-образам&nbsp;для&nbsp;применения&nbsp;политики&nbsp;подписей&nbsp;Docker-образов</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;#&nbsp;secret&nbsp;for&nbsp;accessing&nbsp;Docker&nbsp;images&nbsp;to&nbsp;apply&nbsp;the&nbsp;signature&nbsp;policy&nbsp;for&nbsp;Docker&nbsp;images</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;existingImagePullSecrets:</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-&nbsp;yandexsecret</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;namespace:&nbsp;kyverno</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;#&nbsp;количество&nbsp;реплик&nbsp;для&nbsp;обеспечения&nbsp;высокой&nbsp;доступности</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;#&nbsp;number&nbsp;of&nbsp;replicas&nbsp;to&nbsp;ensure&nbsp;high&nbsp;availability</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;replicaCount:&nbsp;1</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;#&nbsp;установка&nbsp;crds&nbsp;(не&nbsp;требуется,&nbsp;добавлено&nbsp;в&nbsp;директорию&nbsp;crds)</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;#&nbsp;crds&nbsp;installation&nbsp;(not&nbsp;required,&nbsp;added&nbsp;to&nbsp;the&nbsp;crds&nbsp;directory)</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;installCRDs:&nbsp;false</span><br />
<span class="f_CodeExample">...</span></p>
<p class="p_Normal"><a class="dropdown-toggle" style="font-style: normal; font-weight: normal; color: #000000; background-color: transparent; text-decoration: none;" href="javascript:HMToggle('toggle','TOGGLE0186A1')">Заполнение параметров подключения к приватному registry для установки в закрытом контуре без доступа в интернет</a></p>
<div id="TOGGLE0186A1" class="dropdown-toggle-body" style="text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 0 0 0;"><table style="border:none; border-spacing:0;">
<p class="p_Normal" style="page-break-inside: avoid;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;"><a class="dropdown-toggle" style="font-style: normal; font-weight: normal; color: #000000; background-color: transparent; text-decoration: none;" href="javascript:HMToggle('toggle','TOGGLE0186A1')">Filling in parameters for connecting to a private registry to install Kyverno in a closed-loop environment without internet access</a></span></p>
<div id="TOGGLE0186A1" class="dropdown-toggle-body" style="text-align: left; text-indent: 0; page-break-inside: avoid; padding: 0 0 0 0; margin: 0 0 0 0;"><table style="border:none; border-spacing:0;">
<tr>
<td style="vertical-align:top; padding:0; border:none"><p class="p_Normal">&nbsp;<br />
Для подключения к приватному <span style="font-weight: bold;">registry</span> нужно:</p>
<td style="vertical-align:top; padding:0; border:none"><p class="p_Normal" style="page-break-inside: avoid;">&nbsp;<br />
<span style="font-family: 'Times New Roman',Times,Georgia,serif;">To connect to a private registry:</span></p>
<ol style="list-style-type:decimal">
<li value="1" class="p_Normal">Скачать образы ELMA365 и загрузить их в локальный реестр образов. Подробнее об этом читайте в статье <a href="downloadin-images-elma365.html" class="topiclink">«Загрузка образов ELMA365»</a>.</li><li value="2" class="p_Normal">Задать адрес и путь для параметров <code><b>kyverno.image.repository</b></code>, <code><b>kyverno.initImage.repository</b></code> и <code><b>kyverno.cleanupController.image.repository</b></code>.</li><li value="3" class="p_Normal">Указать наименование секрета с правами доступа к приватному <span style="font-weight: bold;">registry</span> в параметрах <code><b>kyverno.image.pullSecrets</b></code> и <code><b>kyverno.cleanupController.image.pullSecrets</b></code>. Секрет должен быть создан вручную и зашифрован в Base64.</li></ol>
<p class="p_CodeExample" style="white-space: normal; page-break-inside: avoid;"><span class="f_CodeExample"># Настройки kyverno</span><br />
<li value="1" class="p_Normal" style="page-break-inside: avoid;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">Download BRIX images and upload them to the local image registry. Read more about this in the <a href="downloadin-images-elma365.html" class="topiclink">Download BRIX images</a> article.</span></li><li value="2" class="p_Normal" style="page-break-inside: avoid;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">Set the address and path for the </span><code><b>kyverno.image.repository</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">, </span><code><b>kyverno.initImage.repository</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">, and </span><code><b>kyverno.cleanupController.image.repository</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;"> parameters.</span></li><li value="3" class="p_Normal" style="page-break-inside: avoid;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">Specify the name of the secret with access rights to the private registry in </span><code><b>kyverno.image.pullSecrets</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;"> and </span><code><b>kyverno.cleanupController.image.pullSecrets</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">. The secret must be created manually and encrypted in Base64.</span></li></ol>
<p class="p_CodeExample" style="page-break-inside: avoid;"><span class="f_CodeExample">#&nbsp;Configure&nbsp;kyverno</span><br />
<span class="f_CodeExample">kyverno:</span><br />
<span class="f_CodeExample">...</span><br />
<span class="f_CodeExample">  # Параметры подключения к приватному registry</span><br />
<span class="f_CodeExample">  image:</span><br />
<span class="f_CodeExample"># адрес и путь для приватного registry</span><br />
<span class="f_CodeExample">  &nbsp; repository: registry.example.com/kyverno/kyverno</span><br />
<span class="f_CodeExample">  &nbsp; tag: v1.9.0</span><br />
<span class="f_CodeExample"># секрет с правами доступа к приватному registry должен быть создан вручную, зашифрованный в Base64</span><br />
<span class="f_CodeExample">  &nbsp; pullSecrets:</span><br />
<span class="f_CodeExample">  &nbsp; &nbsp; - myRegistryKeySecretName</span><br />
<span class="f_CodeExample">  initImage:</span><br />
<span class="f_CodeExample"># адрес и путь для приватного registry</span><br />
<span class="f_CodeExample">  &nbsp; repository: registry.example.com/kyverno/kyvernopre</span><br />
<span class="f_CodeExample">  &nbsp; tag: v1.9.0</span><br />
<span class="f_CodeExample">  cleanupController:</span><br />
<span class="f_CodeExample">  &nbsp; image:</span><br />
<span class="f_CodeExample"># адрес и путь для приватного registry</span><br />
<span class="f_CodeExample">  &nbsp; &nbsp; repository: registry.example.com/kyverno/cleanup-controller</span><br />
<span class="f_CodeExample">  &nbsp; &nbsp; tag: v1.9.0</span><br />
<span class="f_CodeExample"># секрет с правами доступа к приватному registry должен быть создан вручную и зашифрован в Base64</span><br />
<span class="f_CodeExample">  &nbsp; &nbsp; pullSecrets:</span><br />
<span class="f_CodeExample">  &nbsp; &nbsp; &nbsp; - myRegistryKeySecretName</span></p>
<p class="p_Normal">&nbsp;<br />
Где:</p>
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;</span><span class="f_CodeExample">#&nbsp;parameters&nbsp;</span><span class="f_CodeExample">for&nbsp;</span><span class="f_CodeExample">connecting&nbsp;to&nbsp;a&nbsp;</span><span class="f_CodeExample">private&nbsp;</span><span class="f_CodeExample">registry</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;image:</span><br />
<span class="f_CodeExample">#&nbsp;address&nbsp;and&nbsp;path&nbsp;for&nbsp;the&nbsp;private&nbsp;registry</span><br />
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;&nbsp;&nbsp;</span><span class="f_CodeExample">repository:&nbsp;registry.example.com/kyverno/kyverno</span><br />
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;&nbsp;&nbsp;</span><span class="f_CodeExample">tag:&nbsp;v1.9.0</span><br />
<span class="f_CodeExample">#&nbsp;secret&nbsp;with&nbsp;access&nbsp;rights&nbsp;to&nbsp;the&nbsp;private&nbsp;registry&nbsp;must&nbsp;be&nbsp;created&nbsp;manually,&nbsp;encrypted&nbsp;in&nbsp;Base64</span><br />
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;&nbsp;&nbsp;</span><span class="f_CodeExample">pullSecrets:</span><br />
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="f_CodeExample">-&nbsp;myRegistryKeySecretName</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;initImage:</span><br />
<span class="f_CodeExample">#&nbsp;address&nbsp;and&nbsp;path&nbsp;for&nbsp;the&nbsp;private&nbsp;registry</span><br />
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;&nbsp;&nbsp;</span><span class="f_CodeExample">repository:&nbsp;registry.example.com/kyverno/kyvernopre</span><br />
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;&nbsp;&nbsp;</span><span class="f_CodeExample">tag:&nbsp;v1.9.0</span><br />
<span class="f_CodeExample">&nbsp;&nbsp;cleanupController:</span><br />
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;&nbsp;&nbsp;</span><span class="f_CodeExample">image:</span><br />
<span class="f_CodeExample">#&nbsp;address&nbsp;and&nbsp;path&nbsp;for&nbsp;the&nbsp;private&nbsp;registry</span><br />
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="f_CodeExample">repository:&nbsp;registry.example.com/kyverno/cleanup-controller</span><br />
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="f_CodeExample">tag:&nbsp;v1.9.0</span><br />
<span class="f_CodeExample">#&nbsp;secret&nbsp;with&nbsp;access&nbsp;rights&nbsp;to&nbsp;the&nbsp;private&nbsp;registry&nbsp;must&nbsp;be&nbsp;created&nbsp;manually,&nbsp;encrypted&nbsp;in&nbsp;Base64</span><br />
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="f_CodeExample">pullSecrets:</span><br />
<span class="f_CodeExample"> </span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</span><span class="f_CodeExample">-&nbsp;myRegistryKeySecretName</span></p>
<p style="line-height: 1.0; white-space: nowrap;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">where&nbsp;</span><code><b>kyverno.image.repository</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">&nbsp;format&nbsp;is&nbsp;as&nbsp;follows:</span></p>
<ul style="list-style-type:disc">
<li class="p_Normal">формат <code><b>kyverno.image.repository</b></code>:</li></ul>
<ul style="list-style-type:circle"><ul style="list-style-type:square">
<li class="p_Normal">адрес — <code><b>registry.example.com</b></code>;</li><li class="p_Normal">путь — <code><b>/kyverno/kyverno</b></code>;</li></ul></li></ul>
<ul style="list-style-type:disc">
<li class="p_Normal">формат <code><b>kyverno.initImage.repository</b></code>:</li></ul>
<ul style="list-style-type:circle"><ul style="list-style-type:square">
<li class="p_Normal">адрес — <code><b>registry.example.com</b></code>;</li><li class="p_Normal">путь — <code><b>/kyverno/kyvernopre</b></code>;</li></ul></li></ul>
<ul style="list-style-type:disc">
<li class="p_Normal">формат <code><b>kyverno.cleanupController.repository</b></code>:</li></ul>
<ul style="list-style-type:circle"><ul style="list-style-type:square">
<li class="p_Normal">адрес — <code><b>registry.example.com</b></code>;</li><li class="p_Normal">путь — <code><b>/kyverno/cleanup-controller</b></code>.</li></ul></li></ul>
<li style="line-height: 1.0; white-space: nowrap; page-break-inside: avoid;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">The&nbsp;address&nbsp;is </span><code><b>registry.example.com</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">.</span></li><li style="line-height: 1.0; white-space: nowrap; page-break-inside: avoid;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">The&nbsp;path&nbsp;is </span><code><b>/kyverno/kyverno; kyverno.initImage.repositor</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">.</span></li><li style="line-height: 1.0; white-space: nowrap; page-break-inside: avoid;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">The&nbsp;address&nbsp;is </span><code><b>registry.example.com</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">.</span></li><li style="line-height: 1.0; white-space: nowrap; page-break-inside: avoid;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">The&nbsp;path&nbsp;is </span><code><b>/kyverno/kyvernopre; kyverno.cleanupController.repository</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">.</span></li><li style="line-height: 1.0; white-space: nowrap; page-break-inside: avoid;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">The&nbsp;address&nbsp;is </span><code><b>registry.example.com</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">.</span></li><li style="line-height: 1.0; white-space: nowrap; page-break-inside: avoid;"><span style="font-family: 'Times New Roman',Times,Georgia,serif;">The&nbsp;path&nbsp;is </span><code><b>/kyverno/cleanup-controller</b></code><span style="font-family: 'Times New Roman',Times,Georgia,serif;">.</span></li></ul>
</td>
</tr>
</table>
</div>
<p style="line-height: 1.0; white-space: nowrap; page-break-inside: avoid;"><span style="font-size: 13px; color: #000000;">&nbsp;</span></p>
<div class="bottom-nav">
@ -206,7 +194,7 @@
</div>
<!-- добавляет на страницу строку блок Была ли статья полезной? -->
<div class="feedback-wrap"><div class="feedback" id="feedback"><span><b>Была ли статья полезной?</b></span><form action="" method="POST" class="feedback-form" id="feedback-form"><div class="feedback__popup feedback__popup-response" id="feedback__popup_thx">Спасибо за ваш отзыв!</div><div id="feedback-success-popup"><div class="wrap"><button type="button" class="feedback-popup-close">×</button><svg width="44" height="44" viewBox="0 0 44 44" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_212_2187)"><path d="M22 0.6875C10.2294 0.6875 0.6875 10.2294 0.6875 22C0.6875 33.7706 10.2294 43.3125 22 43.3125C33.7706 43.3125 43.3125 33.7706 43.3125 22C43.3125 10.2294 33.7706 0.6875 22 0.6875ZM22 40.5625C11.8023 40.5625 3.4375 32.3078 3.4375 22C3.4375 11.8024 11.6922 3.4375 22 3.4375C32.1977 3.4375 40.5625 11.6922 40.5625 22C40.5625 32.1976 32.3078 40.5625 22 40.5625ZM34.1713 16.933L18.6613 32.3186C18.257 32.7197 17.604 32.7171 17.203 32.3128L9.82283 24.873C9.42176 24.4686 9.42434 23.8157 9.82867 23.4146L10.5609 22.6884C10.9652 22.2873 11.6181 22.2899 12.0192 22.6942L17.9468 28.6697L31.9926 14.7366C32.3969 14.3356 33.0498 14.3382 33.4509 14.7425L34.1772 15.4747C34.5783 15.879 34.5757 16.532 34.1713 16.933Z" fill="#27AE60"></path></g><defs><clipPath id="clip0_212_2187"><rect width="44" height="44" fill="white"></rect></clipPath></defs></svg><p>Ваш отзыв успешно отправлен!</p><span>Спасибо за обратную связь.</span></div></div><div class="feedback__popup" id="feedback__popup_why"><button type="button" class="feedback-popup-close">×</button><div class="feedback__popup-header">Уточните, почему:</div><input type="radio" name="category" id="bad_recommendation" value="bad_recommendation"><label for="bad_recommendation">Рекомендации не помогли</label><input type="radio" name="category" id="difficult_text" value="difficult_text"><label for="difficult_text">Текст трудно понять</label><input type="radio" name="category" id="no_answer" value="no_answer"><label for="no_answer">Нет ответа на мой вопрос</label><input type="radio" name="category" id="bad_header" value="bad_header"><label for="bad_header">Содержание статьи не соответствует заголовку</label><input type="radio" name="category" id="other_reason" value="other_reason"><label for="other_reason">Другая причина</label></div><div class="feedback__popup" id="feedback__popup-other"><button type="button" class="feedback-popup-close">×</button> <div class="feedback__popup-header">Расскажите, что вам не понравилось в статье:</div><textarea class="feedback__textarea" name="other" id=""></textarea><input type="submit" class="feedback__other-btn" value="Отправить"></div><div class="feedback-form__btn-group"><input type="radio" name="useful" id="feedback__useful_yes" value="true"><label for="feedback__useful_yes"><img src="like.svg"/><span class="feedback-form__btn-group_yes-btn">Да</span></label><input type="radio" name="useful" id="feedback__useful_no" value="false"><label for="feedback__useful_no"><img src="dislike.svg"/><span class="feedback-form__btn-group_no-btn">Нет</span></label></div><select name="category"><option disabled>Выберите вариант</option><option value="bad_recommendation" selected>Рекомендации не помогли</option><option value="difficult_text">Текст трудно понять</option><option value="no_answer">Нет ответа на мой вопрос</option><option value="bad_header">Содержание статьи не соответствует заголовку</option><option value="other_reason">Другая причина</option></select><input type="submit"></form></div></div>
<div class="feedback" id="feedback"><div class="feedback-help"><span><b>Was this helpful?</b></span><form action="" method="POST" class="feedback-form" id="feedback-form"><div class="feedback__popup feedback__popup-response" id="feedback__popup_thx" style="display: none;">Thanks for your feedback!</div><div class="feedback__popup" id="feedback__popup_why" style="display: none;"><div class="feedback__popup-header">Please specify why:</div><input type="radio" name="category" id="bad_recommendation" value="bad_recommendation"><label for="bad_recommendation">Recommendations did not help me</label><input type="radio" name="category" id="difficult_text" value="difficult_text"><label for="difficult_text">Article is hard to understand</label><input type="radio" name="category" id="no_answer" value="no_answer"><label for="no_answer">Didn`t answer my question</label><input type="radio" name="category" id="bad_header" value="bad_header"><label for="bad_header">Content does not match the topic</label><input type="radio" name="category" id="other_reason" value="other_reason"><label for="other_reason">Other</label></div><div class="feedback__popup" id="feedback__popup-other" style="display: none;"><div class="feedback__popup-header">How we can improve it?</div><textarea class="feedback__textarea" name="other" id=""></textarea><input type="submit" class="feedback__other-btn" value="Submit"></div><div class="feedback-form__btn-group"><input type="radio" name="useful" id="feedback__useful_yes" value="true"><label for="feedback__useful_yes"><img src="like.svg" class="small-img" alt="like"><spanclass="feedback-form__btn-group_yes-btn">Yes</spanclass="feedback-form__btn-group_yes-btn"></label><input type="radio" name="useful" id="feedback__useful_no" value="false"><label for="feedback__useful_no"><img src="dislike.svg" class="small-img" alt="dislike"><spanclass="feedback-form__btn-group_no-btn">No</spanclass="feedback-form__btn-group_no-btn"></label></div><select name="category"><option disabled="">Please specify why</option><option value="bad_recommendation" selected="">Recommendations did not help me</option><option value="difficult_text">Article is hard to understand</option><option value="no_answer">Didn`t answer my question</option><option value="bad_header">Content does not match the topic</option><option value="other_reason">Other</option></select><input type="submit"></form></div><div class="found_typo"><p style="margin: 0px; margin-top: 16px !important;"><span><b>Found a typo?</b></span> Select it and press <i>Ctrl+Enter</i> to send us feedback</p></div></div>
</section>
</div>
@ -214,7 +202,7 @@
<input type="checkbox" />
<div class="article__arrow"></div>
<div class="table-of-contents elma365-right" id="toc2Content">
<h3 class="h3-toc">В этой статье</h3>
<h3 class="h3-toc">In this topic</h3>
<nav id="toc2"></nav>
</div>
</aside>
@ -225,63 +213,30 @@
<div class="footer-container">
<div class="footer-mobile">
<ul class="footer-mobile__list"><li><a href="https://api.elma365.com/ru/" target="_blank">API</a></li><li><a href="https://tssdk.elma365.com/" target="_blank">TS SDK</a></li><li><a href="https://community.elma365.com/" target="_blank">Community</a></li><li><a href="https://elma-academy.com/ru/elma365" target="_blank">Академия</a></li></ul><ul class="footer-mobile__list"><li><a href="https://elma365.com/ru/help/platform/get-trial.html">Платформа</a></li><li><a href="https://elma365.com/ru/help/ecm/ecm-functions.html">ECM</a></li><li><a href="https://elma365.com/ru/help/service/service-functions.html">Service</a></li><li><a href="https://elma365.com/ru/help/projects/projects-functions.html">Проекты</a></li></ul>
<ul class="footer-mobile__list"><li><a href="https://brix365.com/en/" target="_blank">BRIX</a></li><li><a href="https://tssdk.brix365.com/en/latest/" target="_blank">SDK</a></li><li><a href="https://api.brix365.com/en/" target="_blank">API</a></li></ul><ul class="footer-mobile__list"><li><a href="https://brix365.com/en/help/platform/get-trial.html">Platform</a></li><li><a href="https://brix365.com/en/help/ecm/ecm-functions.html">ECM</a></li><li><a href="https://brix365.com/en/help/service/service-functions.html">Service</a></li><li><a href="https://brix365.com/en/help/projects/projects-functions.html">Projects</a></li></ul>
</div>
<div class="container">
<div class="footer-wrap">
<div><span class="mobile-question-popup">Отправить фидбэк</span><form method="POST" action class="question__popup question-xs" id="question__popup"><div class="question-wrap"><span class="close"></span><span class="title">Задать вопрос</span><label for="help_question" style="display: none;"></label><textarea name="help_question" id="help_question"></textarea><input type="submit" value="Отправить"></div></form><div class="hidden fade-in question-success-xs">Ваш фидбэк отправлен.</div></div>
<div class="footer-flex-b">
<div class="footer-top">
<span class="footer-copy">&copy; 2025
ELMA365
</span>
<a href="https://navigator.sk.ru/orn/1122971" target="_blank">
<img src="sk-resident.svg" alt="sk icon" class="footer-img" width="117" height="34">
</a>
</div>
<div class="footer-line">
<div class="footer-line-copy">
<span class="footer-copy">&copy; 2025
ELMA365
</span>
</div>
<ul class="footer-list">
<li class="footer-item"><a href="https://elma365.com/ru/" target="_blank" class="footer-link" style="color: #0D4A75;"><img src="browse.svg" alt="browse icon" class="footer-img">elma365.com</a></li><li class="footer-item"><a href="https://www.youtube.com/user/ELMABPM" target="_blank" class="footer-link"><img src="yt.svg" alt="youtube icon" class="footer-img"></a></li><li class="footer-item"><a href="https://vk.com/elma_bpm" target="_blank" class="footer-link"><img src="vk.svg" alt="vk icon" class="footer-img"></a></li><li class="footer-item"><a href="https://t.me/elmaday" target="_blank" class="footer-link"><img src="tg.svg" alt="telegram icon" class="footer-img"></a></li><li class="footer-item"><a href="https://dzen.ru/elma" target="_blank" class="footer-link"><img src="dzen.svg" alt="dzen icon" class="footer-img"></a></li>
<li class="footer-item">
<a href="https://navigator.sk.ru/orn/1122971" target="_blank">
<img src="sk-resident.svg" alt="sk icon" class="footer-img" width="117" height="34">
</a>
</li>
</ul>
</div>
</div>
<div class="footer-wrap">
<div><span class="mobile-question-popup">Send feedback</span><form method="POST" action class="question__popup question-xs" id="question__popup"><div class="question-wrap"><span class="close"></span><span class="title">Ask a question</span><label for="help_question" style="display: none;"></label><textarea name="help_question" id="help_question"></textarea><input type="submit" value="Send"></div></form><div class="hidden fade-in question-success-xs">Sent</div></div>
<div class="footer-flex-b">
<span class="footer-copy">&copy; 2025 BRIX</span>
<ul class="footer-list">
<li class="footer-item">
<a href="#" class="arrow-top" style="display: block;"></a>
</li>
</ul>
</div>
</div>
<a href="#" class="arrow-top"></a>
</div>
</footer>
<!-- <script type="text/javascript" src="jquery1.min.js"></script>-->
<iframe name="hmnavigation" style="display:none!important"></iframe>
<!--<script src="./jquery-ui.js"></script> -->
<script src="./jquery-ui.min.js"></script>
<script src="./jquery-ui.js"></script>
<!--script src="//cdn.jsdelivr.net/npm/featherlight@1.7.14/release/featherlight.min.js" type="text/javascript" charset="utf-8"></script-->
<script src="./jquery.tocify.min.js"></script>
<script src="./TypoReporter.min.js"></script>