desired:
  ociRef: oci://harbor.blog-harbor.svc.cluster.local/fulfillment/shipments@sha256:1f729335ce618fe83366cb5133cf35209da7adaa05e6d13071a0a5122e044ff2
  registryAuthFrom:
    name: harbor-operator
    mode: Environment
  verificationPolicyFrom:
    name: blog-schema-policy
    key: policy.yaml
  transport:
    caFrom:
      name: harbor-ca
      key: ca.crt