Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement Single Layer OCI Artifacts #98

Draft
wants to merge 6 commits into
base: main
Choose a base branch
from
Draft

Conversation

frewilhelm
Copy link
Contributor

@frewilhelm frewilhelm commented Jan 16, 2025

Fixes #75

@frewilhelm frewilhelm force-pushed the impl_artifacts branch 2 times, most recently from a39704d to 28cc46a Compare January 22, 2025 15:03
@frewilhelm frewilhelm changed the title POC: Implement Single Layer OCI Artifacts Implement Single Layer OCI Artifacts Jan 22, 2025
@frewilhelm frewilhelm force-pushed the impl_artifacts branch 7 times, most recently from f1c1f69 to cbe7736 Compare February 3, 2025 09:17
@frewilhelm frewilhelm force-pushed the impl_artifacts branch 3 times, most recently from e168ef4 to 45ce876 Compare February 5, 2025 17:54
ikhandamirov added a commit that referenced this pull request Feb 7, 2025
#### What this PR does / why we need it

With this PR an in-cluster instance of `zot` OCI registry will be
deployed aside to the controllers:
* `make deploy-dev` makes `zot` accessible via http.
* `make deploy` makes `zot` accessible via https.

#### Which issue(s) this PR fixes

This PR is in the context of #75 and should be merged before #98
@frewilhelm frewilhelm force-pushed the impl_artifacts branch 3 times, most recently from 2458ab5 to d9af52c Compare February 7, 2025 14:52
@frewilhelm frewilhelm force-pushed the impl_artifacts branch 5 times, most recently from 2e78025 to 4b0a1ce Compare February 13, 2025 12:13
@frewilhelm frewilhelm force-pushed the impl_artifacts branch 4 times, most recently from e0fd87f to ac6759c Compare February 14, 2025 17:20
@frewilhelm frewilhelm force-pushed the impl_artifacts branch 8 times, most recently from ce9492f to 847f0e1 Compare February 18, 2025 18:15
jakobmoellerdev and others added 2 commits February 25, 2025 14:50
fixes the reconciler tests by optimizing them and cleaning them up.

To remove a potential race of the test and the control loop I had to
introduce a finalizer on the component that serializes the deletion of
the snapshots. (even though we are aware that envtest cannot delete with
ownerrefs)

<!-- markdownlint-disable MD041 -->
#### What this PR does / why we need it

#### Which issue(s) this PR fixes
<!--
Usage: `Fixes #<issue number>`, or `Fixes (paste link of issue)`.
-->

var extractedData bytes.Buffer
//nolint:gosec // TODO: Decision needed
if _, err := io.Copy(&extractedData, tarReader); err != nil {

Check failure

Code scanning / gosec

Potential DoS vulnerability via decompression bomb Error

Potential DoS vulnerability via decompression bomb
}

// Open the file
f, err := os.Open(file)

Check failure

Code scanning / gosec

Potential file inclusion via variable Error

Potential file inclusion via variable
Expect(err).NotTo(HaveOccurred())

// Start zot-registry
zotCmd := exec.Command(binPath, "serve", configFile)

Check failure

Code scanning / gosec

Subprocess launched with variable Error test

Subprocess launched with variable
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Set up Single Layer OCI Artifacts
3 participants