`list-metadata` not displaying the right information

[paul58914080]

Describe the bug

I wanted to list all the images that are locked. Despite locking the images with write-enabled & delete-enabled as false when I try to list through manifest I see that the image is not having the right values for writeEnabled and deleteEnabled as false.

Related command

az acr manifest list-metadata --registry $registry --name $repository --orderby time_desc

Errors

Despite being locked the above command shows wrong information

{
    "architecture": "amd64",
    "changeableAttributes": {
-    "deleteEnabled": true,
      "listEnabled": true,
      "readEnabled": true,
-     "writeEnabled": true
    },
    "configMediaType": "application/vnd.docker.container.image.v1+json",
    "createdTime": "2024-06-13T07:37:24.1930109Z",
    "digest": "",
    "imageSize": 557524,
    "lastUpdateTime": "2024-06-13T07:37:24.1930109Z",
    "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
    "os": "linux",
    "tags": [
      "2"
    ]
  }

When I use the command az acr repository show-tags -n $registry --repository $repository --detail it displays the right information, but it lacks meta infromation like imageSize which I am keen on getting.

Issue script & Debug output

N\A

Expected behavior

I would like to see the right information with the manifest command

Environment Summary

azure-cli 2.59.0 *

core 2.59.0 *

telemetry 1.1.0

Dependencies:

msal 1.27.0

azure-mgmt-resource 23.1.0b2

Python location '/usr/bin/python3.9'

Python (Linux) 3.9.18 (main, Sep 22 2023, 17:58:34)

[GCC 8.5.0 20210514 (Red Hat 8.5.0-20)]

Additional context

No response

[azure-client-tools-bot-prd]

Hi @paul58914080,

2.59.0 is not the latest Azure CLI(2.61.0).

If you haven't already attempted to do so, please upgrade to the latest Azure CLI version by following https://learn.microsoft.com/en-us/cli/azure/update-azure-cli.

[yonzhan]

Thank you for opening this issue, we will look into it.

[microsoft-github-policy-service]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @toddysm, @luisdlp, @northtyphoon.

[estebanreyl]

You are listing different things which is why the information doesn't match. We have metadata at three levels, repository, tag, and manifest.

When you do:
az acr manifest list-metadata --registry $registry --name $repository --orderby time_desc
you are getting the manifest metadata

When you do:
az acr repository show-tags -n $registry --repository $repository --detail
you are seeing the tag metadata

The two are separate and there is no single API that returns both metadata entries. You could set the delete prevention flags at the manifest level instead, but thats also different than doing so at the tag level.

[toddysm]

This seems to be answered. If there are no further questions we will close this in 30 days.

[toddysm]

Closing because the question is answered and there is no more activity on this issue