3d2fd1b538
1. add new registry api under resources.kubesphere.io/v1alpha3 2. deprecate registry api v1alpha2 Registry API v1alpha2 uses docker client to authenticate image registry secret, which depends on docker.sock. We used to mount host `/var/run/docker.sock` to deployment. It will prevent us imgrating to containerd since no `docker.sock` exists. Registry API v1alpha3 comes to rescure, it wraps library go-containerregistry and compatible with docker registry, Harbor etc.
53 lines
1.4 KiB
Go
53 lines
1.4 KiB
Go
package v2
|
|
|
|
import (
|
|
corev1 "k8s.io/api/core/v1"
|
|
)
|
|
|
|
type RegistryHelper interface {
|
|
// check if secret has correct credential to authenticate with remote registry
|
|
Auth(secret *corev1.Secret) (bool, error)
|
|
|
|
// fetch OCI Image Manifest, specification described as in https://github.com/opencontainers/image-spec/blob/main/manifest.md
|
|
Config(secret *corev1.Secret, image string) (*ImageConfig, error)
|
|
|
|
// list all tags of given repository, experimental
|
|
ListRepositoryTags(secret *corev1.Secret, repository string) (RepositoryTags, error)
|
|
}
|
|
|
|
type registryHelper struct{}
|
|
|
|
func NewRegistryHelper() RegistryHelper {
|
|
return ®istryHelper{}
|
|
}
|
|
|
|
func (r *registryHelper) Auth(secret *corev1.Secret) (bool, error) {
|
|
secretAuth, err := NewSecretAuthenticator(secret)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
|
|
return secretAuth.Auth()
|
|
}
|
|
|
|
func (r *registryHelper) Config(secret *corev1.Secret, image string) (*ImageConfig, error) {
|
|
secretAuth, err := NewSecretAuthenticator(secret)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
registryer := NewRegistryer(secretAuth.Options()...)
|
|
config, err := registryer.Config(image)
|
|
return &ImageConfig{ConfigFile: config}, err
|
|
}
|
|
|
|
func (r *registryHelper) ListRepositoryTags(secret *corev1.Secret, image string) (RepositoryTags, error) {
|
|
secretAuth, err := NewSecretAuthenticator(secret)
|
|
if err != nil {
|
|
return RepositoryTags{}, err
|
|
}
|
|
|
|
registryer := NewRegistryer(secretAuth.Options()...)
|
|
return registryer.ListRepositoryTags(image)
|
|
}
|