Method isSecureIndex

internal/registry/config.go:172–180

isSecureIndex returns false if the provided indexName is part of the list of insecure registries Insecure registries accept HTTP and/or accept HTTPS with certificates from unknown CAs. The list of insecure registries can contain an element with CIDR notation to specify a whole subnet. If the subnet

(indexName string)

// in a subnet. If the resolving is not successful, isSecureIndex will only try to match hostname to any element
// of insecureRegistries.
func (config *serviceConfig) isSecureIndex(indexName string) bool {
	// Check for configured index, first.  This is needed in case isSecureIndex
	// is called from anything besides newIndexInfo, in order to honor per-index configurations.
	if index, ok := config.indexConfigs[indexName]; ok {
		return index.Secure
	}

	return !isCIDRMatch(config.insecureRegistryCIDRs, indexName)
}

// for mocking in unit tests.
var lookupIP = net.LookupIP