Creating an Image Signing Policy

package com.huaweicloud.sdk.test;

import com.huaweicloud.sdk.core.auth.ICredential;
import com.huaweicloud.sdk.core.auth.BasicCredentials;
import com.huaweicloud.sdk.core.exception.ConnectionException;
import com.huaweicloud.sdk.core.exception.RequestTimeoutException;
import com.huaweicloud.sdk.core.exception.ServiceResponseException;
import com.huaweicloud.sdk.swr.v2.region.SwrRegion;
import com.huaweicloud.sdk.swr.v2.*;
import com.huaweicloud.sdk.swr.v2.model.*;

import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.util.HashMap;

public class CreateInstanceSignPolicySolution {

    public static void main(String[] args) {
        // The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security.
        // In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment
        String ak = System.getenv("CLOUD_SDK_AK");
        String sk = System.getenv("CLOUD_SDK_SK");
        String projectId = "{project_id}";

        ICredential auth = new BasicCredentials()
                .withProjectId(projectId)
                .withAk(ak)
                .withSk(sk);

        SwrClient client = SwrClient.newBuilder()
                .withCredential(auth)
                .withRegion(SwrRegion.valueOf("<YOUR REGION>"))
                .build();
        CreateInstanceSignPolicyRequest request = new CreateInstanceSignPolicyRequest();
        request.withInstanceId("{instance_id}");
        request.withNamespaceName("{namespace_name}");
        CreateSignaturePolicyRequestBody body = new CreateSignaturePolicyRequestBody();
        List<SignRuleSelector> listScopeSelectorsScopeSelectors = new ArrayList<>();
        listScopeSelectorsScopeSelectors.add(
            new SignRuleSelector()
                .withKind("doublestar")
                .withDecoration("repoMatches")
                .withPattern("**")
        );
        Map<String, List<SignRuleSelector>> listScopeRulesScopeSelectors = new HashMap<>();
        listScopeRulesScopeSelectors.put("repository", listScopeSelectorsScopeSelectors);
        List<SignRuleSelector> listScopeRulesTagSelectors = new ArrayList<>();
        listScopeRulesTagSelectors.add(
            new SignRuleSelector()
                .withKind("doublestar")
                .withDecoration("matches")
                .withPattern("**")
                .withExtras("{"untagged":true}")
        );
        List<SignScopeRule> listbodyScopeRules = new ArrayList<>();
        listbodyScopeRules.add(
            new SignScopeRule()
                .withTagSelectors(listScopeRulesTagSelectors)
                .withScopeSelectors(listScopeRulesScopeSelectors)
                .withRepoScopeMode("regular")
        );
        TriggerSetting triggerSettingsTrigger = new TriggerSetting();
        triggerSettingsTrigger.withCron("");
        TriggerConfig triggerbody = new TriggerConfig();
        triggerbody.withType("manual")
            .withTriggerSettings(triggerSettingsTrigger);
        body.withScopeRules(listbodyScopeRules);
        body.withTrigger(triggerbody);
        body.withSignatureKey("668985d5-919d-4c51-9293-eb846c78cbf0");
        body.withSignatureAlgorithm(CreateSignaturePolicyRequestBody.SignatureAlgorithmEnum.fromValue("ECDSA_SHA_384"));
        body.withSignatureMethod(CreateSignaturePolicyRequestBody.SignatureMethodEnum.fromValue("KMS"));
        body.withEnabled(true);
        body.withName("test11");
        request.withBody(body);
        try {
            CreateInstanceSignPolicyResponse response = client.createInstanceSignPolicy(request);
            System.out.println(response.toString());
        } catch (ConnectionException e) {
            e.printStackTrace();
        } catch (RequestTimeoutException e) {
            e.printStackTrace();
        } catch (ServiceResponseException e) {
            e.printStackTrace();
            System.out.println(e.getHttpStatusCode());
            System.out.println(e.getRequestId());
            System.out.println(e.getErrorCode());
            System.out.println(e.getErrorMsg());
        }
    }
}

# coding: utf-8

import os
from huaweicloudsdkcore.auth.credentials import BasicCredentials
from huaweicloudsdkswr.v2.region.swr_region import SwrRegion
from huaweicloudsdkcore.exceptions import exceptions
from huaweicloudsdkswr.v2 import *

if __name__ == "__main__":
    # The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security.
    # In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment
    ak = os.environ["CLOUD_SDK_AK"]
    sk = os.environ["CLOUD_SDK_SK"]
    projectId = "{project_id}"

    credentials = BasicCredentials(ak, sk, projectId)

    client = SwrClient.new_builder() \
        .with_credentials(credentials) \
        .with_region(SwrRegion.value_of("<YOUR REGION>")) \
        .build()

    try:
        request = CreateInstanceSignPolicyRequest()
        request.instance_id = "{instance_id}"
        request.namespace_name = "{namespace_name}"
        listScopeSelectorsScopeSelectors = [
            SignRuleSelector(
                kind="doublestar",
                decoration="repoMatches",
                pattern="**"
            )
        ]
        listScopeSelectorsScopeRules = {
            "repository": listScopeSelectorsScopeSelectors
        }
        listTagSelectorsScopeRules = [
            SignRuleSelector(
                kind="doublestar",
                decoration="matches",
                pattern="**",
                extras="{"untagged":true}"
            )
        ]
        listScopeRulesbody = [
            SignScopeRule(
                tag_selectors=listTagSelectorsScopeRules,
                scope_selectors=listScopeSelectorsScopeRules,
                repo_scope_mode="regular"
            )
        ]
        triggerSettingsTrigger = TriggerSetting(
            cron=""
        )
        triggerbody = TriggerConfig(
            type="manual",
            trigger_settings=triggerSettingsTrigger
        )
        request.body = CreateSignaturePolicyRequestBody(
            scope_rules=listScopeRulesbody,
            trigger=triggerbody,
            signature_key="668985d5-919d-4c51-9293-eb846c78cbf0",
            signature_algorithm="ECDSA_SHA_384",
            signature_method="KMS",
            enabled=True,
            name="test11"
        )
        response = client.create_instance_sign_policy(request)
        print(response)
    except exceptions.ClientRequestException as e:
        print(e.status_code)
        print(e.request_id)
        print(e.error_code)
        print(e.error_msg)

package main

import (
	"fmt"
	"github.com/huaweicloud/huaweicloud-sdk-go-v3/core/auth/basic"
    swr "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/swr/v2"
	"github.com/huaweicloud/huaweicloud-sdk-go-v3/services/swr/v2/model"
    region "github.com/huaweicloud/huaweicloud-sdk-go-v3/services/swr/v2/region"
)

func main() {
    // The AK and SK used for authentication are hard-coded or stored in plaintext, which has great security risks. It is recommended that the AK and SK be stored in ciphertext in configuration files or environment variables and decrypted during use to ensure security.
    // In this example, AK and SK are stored in environment variables for authentication. Before running this example, set environment variables CLOUD_SDK_AK and CLOUD_SDK_SK in the local environment
    ak := os.Getenv("CLOUD_SDK_AK")
    sk := os.Getenv("CLOUD_SDK_SK")
    projectId := "{project_id}"

    auth := basic.NewCredentialsBuilder().
        WithAk(ak).
        WithSk(sk).
        WithProjectId(projectId).
        Build()

    client := swr.NewSwrClient(
        swr.SwrClientBuilder().
            WithRegion(region.ValueOf("<YOUR REGION>")).
            WithCredential(auth).
            Build())

    request := &model.CreateInstanceSignPolicyRequest{}
	request.InstanceId = "{instance_id}"
	request.NamespaceName = "{namespace_name}"
	var listScopeSelectorsScopeSelectors = []model.SignRuleSelector{
        {
            Kind: "doublestar",
            Decoration: "repoMatches",
            Pattern: "**",
        },
    }
	var listScopeSelectorsScopeRules = map[string][](model.SignRuleSelector){
        "repository": listScopeSelectorsScopeSelectors,
    }
	extrasTagSelectors:= "{"untagged":true}"
	var listTagSelectorsScopeRules = []model.SignRuleSelector{
        {
            Kind: "doublestar",
            Decoration: "matches",
            Pattern: "**",
            Extras: &extrasTagSelectors,
        },
    }
	var listScopeRulesbody = []model.SignScopeRule{
        {
            TagSelectors: listTagSelectorsScopeRules,
            ScopeSelectors: listScopeSelectorsScopeRules,
            RepoScopeMode: "regular",
        },
    }
	cronTriggerSettings:= ""
	triggerSettingsTrigger := &model.TriggerSetting{
		Cron: &cronTriggerSettings,
	}
	triggerbody := &model.TriggerConfig{
		Type: "manual",
		TriggerSettings: triggerSettingsTrigger,
	}
	request.Body = &model.CreateSignaturePolicyRequestBody{
		ScopeRules: listScopeRulesbody,
		Trigger: triggerbody,
		SignatureKey: "668985d5-919d-4c51-9293-eb846c78cbf0",
		SignatureAlgorithm: model.GetCreateSignaturePolicyRequestBodySignatureAlgorithmEnum().ECDSA_SHA_384,
		SignatureMethod: model.GetCreateSignaturePolicyRequestBodySignatureMethodEnum().KMS,
		Enabled: true,
		Name: "test11",
	}
	response, err := client.CreateInstanceSignPolicy(request)
	if err == nil {
        fmt.Printf("%+v\n", response)
    } else {
        fmt.Println(err)
    }
}