Which pattern syntax will add all images to a trusted images rule within a registry?

In Prisma Cloud Compute, policy rules for images use a pattern-matching syntax of //:. To create a rule that applies to all images within a specific registry, you must specify the registry's hostname followed by /. The / acts as a wildcard that matches all repositories, images, and tags within that registry. Therefore, registry.acme.com/ is the correct and most efficient pattern to add all images from the registry.acme.com registry to a trusted images rule.

A. .acme.com: This is a wildcard DNS pattern used for matching hostnames, not the correct format for specifying image repositories.
B. acme/: This pattern is incomplete because it lacks a specific registry hostname, making it ambiguous and not a valid identifier for a trust rule.
C. acme.com/myrepo/allimages:/: This pattern is overly specific, as it only trusts a single image named allimages within a single repository.

1. Palo Alto Networks. (n.d.). Prisma Cloud Compute Edition Administrator's Guide. "Defend > Trusted Images". This section explicitly documents the use of wildcards for creating trusted image policies, providing examples that show registry-name/ as the syntax for trusting an entire registry.

2. Palo Alto Networks. (n.d.). Prisma Cloud Compute Edition Administrator's Guide. "Manage > Collections and Rules". The documentation on rule creation confirms that wildcards () are used to match any string in the registry, repository, image, or tag fields.