chains icon indicating copy to clipboard operation
chains copied to clipboard

feat(oci): support insecure OCI registry

Open l-qing opened this issue 6 months ago • 22 comments

Changes

  • Add support for connecting to insecure OCI registries with self-signed certificates
  • Refactor remote options building into a dedicated method
  • Add comprehensive test coverage for both secure and insecure modes

Submitter Checklist

As the author of this PR, please check off the items in this checklist:

  • [x] Has Docs included if any changes are user facing
  • [x] Has Tests included if any functionality added or changed
  • [x] Follows the commit message standard
  • [ ] Meets the Tekton contributor standards (including functionality, content, code)
  • [ ] Release notes block below has been updated with any user facing changes (API changes, bug fixes, changes requiring upgrade notices or deprecation warnings)
  • [ ] Release notes contains the string "action required" if the change requires additional action from users switching to the new release

Release Notes

feat(oci): add complete insecure OCI registry support with security warnings

l-qing avatar Jun 11 '25 07:06 l-qing

The following is the coverage report on the affected files. Say /test pull-tekton-chains-go-coverage to re-run this coverage report

File Old Coverage New Coverage Delta
pkg/chains/storage/oci/legacy.go 40.0% 44.5% 4.5

tekton-robot avatar Jun 11 '25 08:06 tekton-robot

The following is the coverage report on the affected files. Say /test pull-tekton-chains-go-coverage to re-run this coverage report

File Old Coverage New Coverage Delta
pkg/chains/storage/oci/legacy.go 40.0% 44.5% 4.5

tekton-robot avatar Jun 11 '25 08:06 tekton-robot

The following is the coverage report on the affected files. Say /test pull-tekton-chains-go-coverage to re-run this coverage report

File Old Coverage New Coverage Delta
pkg/chains/storage/oci/legacy.go 40.0% 44.5% 4.5

tekton-robot avatar Jun 11 '25 08:06 tekton-robot

/cc @PuneetPunamiya

l-qing avatar Jun 26 '25 02:06 l-qing

@waveywaves I’ve adjusted the code based on your suggestions. Please take a look when you have a moment. ❤️

l-qing avatar Aug 20 '25 14:08 l-qing

The following is the coverage report on the affected files. Say /test pull-tekton-chains-go-coverage to re-run this coverage report

File Old Coverage New Coverage Delta
pkg/chains/storage/oci/legacy.go 40.0% 45.4% 5.4

tekton-robot avatar Aug 20 '25 14:08 tekton-robot

/retest

l-qing avatar Aug 21 '25 17:08 l-qing

The following is the coverage report on the affected files. Say /test pull-tekton-chains-go-coverage to re-run this coverage report

File Old Coverage New Coverage Delta
pkg/chains/storage/oci/legacy.go 40.0% 45.4% 5.4
pkg/chains/storage/oci/simple.go 83.3% 86.7% 3.3

tekton-robot avatar Aug 24 '25 03:08 tekton-robot

The following is the coverage report on the affected files. Say /test pull-tekton-chains-go-coverage to re-run this coverage report

File Old Coverage New Coverage Delta
pkg/chains/storage/oci/legacy.go 40.0% 45.4% 5.4
pkg/chains/storage/oci/simple.go 83.3% 86.7% 3.3

tekton-robot avatar Aug 24 '25 03:08 tekton-robot

@l-qing really appreciate the extra test coverage 🤗 I will take a look at this PR soon

waveywaves avatar Aug 24 '25 07:08 waveywaves

/approve

waveywaves avatar Aug 24 '25 08:08 waveywaves

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: waveywaves To complete the pull request process, please assign priyawadhwa after the PR has been reviewed. You can assign the PR to them by writing /assign @priyawadhwa in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment Approvers can cancel approval by writing /approve cancel in a comment

tekton-robot avatar Aug 24 '25 08:08 tekton-robot

cc @anithapriyanatarajan

waveywaves avatar Aug 27 '25 08:08 waveywaves

@PuneetPunamiya can you help merge this ?

waveywaves avatar Aug 27 '25 08:08 waveywaves

cc @jkhelil

waveywaves avatar Sep 11 '25 08:09 waveywaves