Add support to additionally tag an existing OCI manifest

Signed-off-by: Tobias Wolf <[email protected]>

Author: NotTheEvilOne

.github/actions/features_parse/action.yml

@@ -11,7 +11,7 @@ outputs:
 runs:
   using: composite
   steps:
-    - uses: gardenlinux/python-gardenlinux-lib/.github/actions/[email protected].0
+    - uses: gardenlinux/python-gardenlinux-lib/.github/actions/[email protected].1
     - id: result
       shell: bash
       run: |

.github/actions/flavors_parse/action.yml

@@ -13,7 +13,7 @@ outputs:
 runs:
   using: composite
   steps:
-    - uses: gardenlinux/python-gardenlinux-lib/.github/actions/[email protected].0
+    - uses: gardenlinux/python-gardenlinux-lib/.github/actions/[email protected].1
     - id: matrix
       shell: bash
       run: |

.github/actions/setup/action.yml

@@ -4,7 +4,7 @@ description: Installs the given GardenLinux Python library
 inputs:
   version:
     description: GardenLinux Python library version
-    default: "0.9.0"
+    default: "0.9.1"
   python_version:
     description: Python version to setup
     default: "3.13"

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "gardenlinux"
-version = "0.9.0"
+version = "0.9.1"
 description = "Contains tools to work with the features directory of gardenlinux, for example deducting dependencies from feature sets or validating cnames"
 authors = ["Garden Linux Maintainers <[email protected]>"]
 license = "Apache-2.0"

src/gardenlinux/oci/__main__.py

@@ -30,9 +30,18 @@ def cli():
     type=click.Path(),
     help="Container Name",
 )
+@click.option(
+    "--cname", required=True, type=click.Path(), help="Canonical Name of Image"
+)
+@click.option(
+    "--arch",
+    required=False,
+    type=click.Path(),
+    help="Target Image CPU Architecture",
+)
 @click.option(
     "--version",
-    required=True,
+    required=False,
     type=click.Path(),
     help="Version of image",
 )
@@ -43,15 +52,6 @@ def cli():
     default=None,
     help="Commit of image",
 )
-@click.option(
-    "--arch",
-    required=True,
-    type=click.Path(),
-    help="Target Image CPU Architecture",
-)
-@click.option(
-    "--cname", required=True, type=click.Path(), help="Canonical Name of Image"
-)
 @click.option("--dir", "directory", required=True, help="path to the build artifacts")
 @click.option(
     "--cosign_file",
@@ -76,10 +76,10 @@ def cli():
 )
 def push_manifest(
     container,
+    cname,
+    arch,
     version,
     commit,
-    arch,
-    cname,
     directory,
     cosign_file,
     manifest_file,
@@ -107,6 +107,70 @@ def push_manifest(
         print(manifest.digest, file=open(cosign_file, "w"))
 
 
+@cli.command()
+@click.option(
+    "--container",
+    required=True,
+    type=click.Path(),
+    help="Container Name",
+)
+@click.option(
+    "--cname", required=True, type=click.Path(), help="Canonical Name of Image"
+)
+@click.option(
+    "--arch",
+    required=False,
+    type=click.Path(),
+    help="Target Image CPU Architecture",
+)
+@click.option(
+    "--version",
+    required=False,
+    type=click.Path(),
+    help="Version of image",
+)
+@click.option(
+    "--commit",
+    required=False,
+    type=click.Path(),
+    default=None,
+    help="Commit of image",
+)
+@click.option(
+    "--insecure",
+    default=False,
+    help="Use HTTP to communicate with the registry",
+)
+@click.option(
+    "--tag",
+    required=True,
+    multiple=True,
+    help="Tag to push the manifest with",
+)
+def push_manifest_tags(
+    container,
+    cname,
+    arch,
+    version,
+    commit,
+    insecure,
+    tag,
+):
+    """
+    Push artifacts and the manifest from a directory to a registry.
+
+    :since: 0.7.0
+    """
+
+    container = Container(
+        f"{container}:{version}",
+        insecure=insecure,
+    )
+
+    manifest = container.read_or_generate_manifest(cname, arch, version, commit)
+    container.push_manifest_for_tags(manifest, tag)
+
+
 @cli.command()
 @click.option(
     "--container",

tests/oci/test_oci.py

@@ -66,6 +66,41 @@ def push_manifest(runner, version, arch, cname, additional_tags=None):
         return False
 
 
+def push_manifest_tags(runner, version, arch, cname, tags=None):
+    """Push manifest to registry and return success status"""
+    print(f"Pushing manifest for {cname} {arch}")
+
+    cmd = [
+        "push-manifest-tags",
+        "--container",
+        CONTAINER_NAME_ZOT_EXAMPLE,
+        "--version",
+        version,
+        "--arch",
+        arch,
+        "--cname",
+        cname,
+        "--insecure",
+        "True",
+    ]
+
+    if tags:
+        for tag in tags:
+            cmd.extend(["--tag", tag])
+
+    try:
+        result = runner.invoke(
+            gl_oci,
+            cmd,
+            catch_exceptions=False,
+        )
+        print(f"Push manifest tags output: {result.output}")
+        return result.exit_code == 0
+    except Exception as e:
+        print(f"Error during push manifest tags: {str(e)}")
+        return False
+
+
 def update_index(runner, version, additional_tags=None):
     """Update index in registry and return success status"""
     print("Updating index")
@@ -278,12 +313,25 @@ def test_push_manifest_and_index(
     repo_name = "gardenlinux-example"
     combined_tag = f"{version}-{cname}-{arch}"
 
+    post_push_manifest_tags = []
+
     # Push manifest and update index
+    if cname.startswith(f"{TEST_PLATFORMS[1]}-"):
+        post_push_manifest_tags = additional_tags_manifest
+        additional_tags_manifest = []
+
     push_successful = push_manifest(
         runner, version, arch, cname, additional_tags_manifest
     )
     assert push_successful, "Manifest push should succeed"
 
+    if len(post_push_manifest_tags) > 0:
+        push_successful = push_manifest_tags(
+            runner, version, arch, cname, post_push_manifest_tags
+        )
+        assert push_successful, "Manifest tags push should succeed"
+    #
+
     if push_successful:
         update_index_successful = update_index(runner, version, additional_tags_index)
         assert update_index_successful, "Index update should succeed"