1
0
mirror of https://github.com/quay/quay.git synced 2026-01-27 18:42:52 +03:00
Files
quay/data/registry_model/interface.py
Joseph Schorr 0844256a71 Major post-OCI cleanup (#225)
* Remove V3_UPGRADE_MODE

* Remove tag backfill worker and all callers to tag backfill and upgrades

* Change initdb to create all test data via the manifest builder, rather than manually via legacy images

* Convert various code paths to use the registry_model where we previously did not do so

* Convert the GC test suite to build via the manifest builder

* Delete an old, unused tool

* Delete the Pre OCI registry model

* Add additional error handling to the manifest creation code path

* Add additional error handling to the OCI tag creation code path

* Change how we respond to invalid manifest content types to better handle unknowns

* Change legacy secscan test suite to use the registry model

* Change the repo build badge to use the registry model (also fixes a bug)

* Delete now-unused data model code

* Remove old model adjustment code from OCI model

* Mark older data models as deprecated which will prevent new rows from being inserted

* Remove references to old registry test suite from various testing files

* Remove tag backfill worker (again; got re-added during rebase)

* Move all deprecated model checks into a central function

* Make data_migration more Pythonic

* Small requested fixes to Tag module styling

* Have tag backfill worker fail to migrate if there are TagManifest's

Since this backfill should only be called in future releases for empty models, this should catch someone attempting to upgrade from a too-old version

* Remove labelbackfillworker as it is no longer needed

* Remove unused invalid import

* Reimplement the tag test for the remaining method used
2020-03-17 13:27:29 -04:00

520 lines
17 KiB
Python

from abc import ABCMeta, abstractmethod
from six import add_metaclass
@add_metaclass(ABCMeta)
class RegistryDataInterface(object):
"""
Interface for code to work with the registry data model.
The registry data model consists of all tables that store registry-specific information, such as
Manifests, Blobs, Images, and Labels.
"""
@abstractmethod
def supports_schema2(self, namespace_name):
"""
Returns whether the implementation of the data interface supports schema 2 format manifests.
"""
@abstractmethod
def get_tag_legacy_image_id(self, repository_ref, tag_name, storage):
"""
Returns the legacy image ID for the tag with a legacy images in the repository.
Returns None if None.
"""
@abstractmethod
def get_legacy_tags_map(self, repository_ref, storage):
"""
Returns a map from tag name to its legacy image ID, for all tags with legacy images in the
repository.
Note that this can be a *very* heavy operation.
"""
@abstractmethod
def find_matching_tag(self, repository_ref, tag_names):
"""
Finds an alive tag in the repository matching one of the given tag names and returns it or
None if none.
"""
@abstractmethod
def get_most_recent_tag(self, repository_ref):
"""
Returns the most recently pushed alive tag in the repository, if any.
If none, returns None.
"""
@abstractmethod
def lookup_repository(self, namespace_name, repo_name, kind_filter=None):
"""
Looks up and returns a reference to the repository with the given namespace and name, or
None if none.
"""
@abstractmethod
def get_manifest_for_tag(self, tag, backfill_if_necessary=False, include_legacy_image=False):
"""
Returns the manifest associated with the given tag.
"""
@abstractmethod
def lookup_manifest_by_digest(
self,
repository_ref,
manifest_digest,
allow_dead=False,
include_legacy_image=False,
require_available=False,
):
"""
Looks up the manifest with the given digest under the given repository and returns it or
None if none.
If allow_dead is True, manifests pointed to by dead tags will also be returned. If
require_available is True, a temporary tag will be added onto the returned manifest (before
it is returned) to ensure it is available until another tagging or manifest operation is
taken.
"""
@abstractmethod
def create_manifest_and_retarget_tag(
self, repository_ref, manifest_interface_instance, tag_name, storage, raise_on_error=False
):
"""
Creates a manifest in a repository, adding all of the necessary data in the model.
The `manifest_interface_instance` parameter must be an instance of the manifest
interface as returned by the image/docker package.
Note that all blobs referenced by the manifest must exist under the repository or this
method will fail and return None.
Returns a reference to the (created manifest, tag) or (None, None) on error.
"""
@abstractmethod
def get_legacy_images(self, repository_ref):
"""
Returns an iterator of all the LegacyImage's defined in the matching repository.
"""
@abstractmethod
def get_legacy_image(
self, repository_ref, docker_image_id, include_parents=False, include_blob=False
):
"""
Returns the matching LegacyImages under the matching repository, if any.
If none, returns None.
"""
@abstractmethod
def create_manifest_label(self, manifest, key, value, source_type_name, media_type_name=None):
"""
Creates a label on the manifest with the given key and value.
Can raise InvalidLabelKeyException or InvalidMediaTypeException depending on the validation
errors.
"""
@abstractmethod
def batch_create_manifest_labels(self, manifest):
"""
Returns a context manager for batch creation of labels on a manifest.
Can raise InvalidLabelKeyException or InvalidMediaTypeException depending on the validation
errors.
"""
@abstractmethod
def list_manifest_labels(self, manifest, key_prefix=None):
"""
Returns all labels found on the manifest.
If specified, the key_prefix will filter the labels returned to those keys that start with
the given prefix.
"""
@abstractmethod
def get_manifest_label(self, manifest, label_uuid):
"""
Returns the label with the specified UUID on the manifest or None if none.
"""
@abstractmethod
def delete_manifest_label(self, manifest, label_uuid):
"""
Delete the label with the specified UUID on the manifest.
Returns the label deleted or None if none.
"""
@abstractmethod
def lookup_cached_active_repository_tags(
self, model_cache, repository_ref, start_pagination_id, limit
):
"""
Returns a page of active tags in a repository.
Note that the tags returned by this method are ShallowTag objects, which only contain the
tag name. This method will automatically cache the result and check the cache before making
a call.
"""
@abstractmethod
def lookup_active_repository_tags(self, repository_ref, start_pagination_id, limit):
"""
Returns a page of active tags in a repository.
Note that the tags returned by this method are ShallowTag objects, which only contain the
tag name.
"""
@abstractmethod
def list_all_active_repository_tags(self, repository_ref, include_legacy_images=False):
"""
Returns a list of all the active tags in the repository.
Note that this is a *HEAVY* operation on repositories with a lot of tags, and should only be
used for testing or where other more specific operations are not possible.
"""
@abstractmethod
def list_repository_tag_history(
self,
repository_ref,
page=1,
size=100,
specific_tag_name=None,
active_tags_only=False,
since_time_ms=None,
):
"""
Returns the history of all tags in the repository (unless filtered).
This includes tags that have been made in-active due to newer versions of those tags coming
into service.
"""
@abstractmethod
def get_most_recent_tag_lifetime_start(self, repository_refs):
"""
Returns a map from repository ID to the last modified time ( seconds from epoch, UTC) for
each repository in the given repository reference list.
"""
@abstractmethod
def get_repo_tag(self, repository_ref, tag_name, include_legacy_image=False):
"""
Returns the latest, *active* tag found in the repository, with the matching name or None if
none.
"""
@abstractmethod
def has_expired_tag(self, repository_ref, tag_name):
"""
Returns true if and only if the repository contains a tag with the given name that is
expired.
"""
@abstractmethod
def retarget_tag(
self,
repository_ref,
tag_name,
manifest_or_legacy_image,
storage,
legacy_manifest_key,
is_reversion=False,
):
"""
Creates, updates or moves a tag to a new entry in history, pointing to the manifest or
legacy image specified.
If is_reversion is set to True, this operation is considered a reversion over a previous tag
move operation. Returns the updated Tag or None on error.
"""
@abstractmethod
def delete_tag(self, repository_ref, tag_name):
"""
Deletes the latest, *active* tag with the given name in the repository.
"""
@abstractmethod
def delete_tags_for_manifest(self, manifest):
"""
Deletes all tags pointing to the given manifest, making the manifest inaccessible for
pulling.
Returns the tags deleted, if any. Returns None on error.
"""
@abstractmethod
def change_repository_tag_expiration(self, tag, expiration_date):
"""
Sets the expiration date of the tag under the matching repository to that given.
If the expiration date is None, then the tag will not expire. Returns a tuple of the
previous expiration timestamp in seconds (if any), and whether the operation succeeded.
"""
@abstractmethod
def get_legacy_images_owned_by_tag(self, tag):
"""
Returns all legacy images *solely owned and used* by the given tag.
"""
@abstractmethod
def get_security_status(self, manifest_or_legacy_image):
"""
Returns the security status for the given manifest or legacy image or None if none.
"""
@abstractmethod
def reset_security_status(self, manifest_or_legacy_image):
"""
Resets the security status for the given manifest or legacy image, ensuring that it will get
re-indexed.
"""
@abstractmethod
def backfill_manifest_for_tag(self, tag):
"""
Backfills a manifest for the V1 tag specified. If a manifest already exists for the tag,
returns that manifest.
NOTE: This method will only be necessary until we've completed the backfill, at which point
it should be removed.
"""
@abstractmethod
def is_existing_disabled_namespace(self, namespace_name):
"""
Returns whether the given namespace exists and is disabled.
"""
@abstractmethod
def is_namespace_enabled(self, namespace_name):
"""
Returns whether the given namespace exists and is enabled.
"""
@abstractmethod
def get_manifest_local_blobs(self, manifest, include_placements=False):
"""
Returns the set of local blobs for the given manifest or None if none.
"""
@abstractmethod
def list_manifest_layers(self, manifest, storage, include_placements=False):
"""
Returns an *ordered list* of the layers found in the manifest, starting at the base and
working towards the leaf, including the associated Blob and its placements (if specified).
The layer information in `layer_info` will be of type
`image.docker.types.ManifestImageLayer`. Should not be called for a manifest list.
"""
@abstractmethod
def list_parsed_manifest_layers(
self, repository_ref, parsed_manifest, storage, include_placements=False
):
"""
Returns an *ordered list* of the layers found in the parsed manifest, starting at the base
and working towards the leaf, including the associated Blob and its placements (if
specified).
The layer information in `layer_info` will be of type
`image.docker.types.ManifestImageLayer`. Should not be called for a manifest list.
"""
@abstractmethod
def lookup_derived_image(
self, manifest, verb, storage, varying_metadata=None, include_placements=False
):
"""
Looks up the derived image for the given manifest, verb and optional varying metadata and
returns it or None if none.
"""
@abstractmethod
def lookup_or_create_derived_image(
self,
manifest,
verb,
storage_location,
storage,
varying_metadata=None,
include_placements=False,
):
"""
Looks up the derived image for the given maniest, verb and optional varying metadata and
returns it.
If none exists, a new derived image is created.
"""
@abstractmethod
def get_derived_image_signature(self, derived_image, signer_name):
"""
Returns the signature associated with the derived image and a specific signer or None if
none.
"""
@abstractmethod
def set_derived_image_signature(self, derived_image, signer_name, signature):
"""
Sets the calculated signature for the given derived image and signer to that specified.
"""
@abstractmethod
def delete_derived_image(self, derived_image):
"""
Deletes a derived image and all of its storage.
"""
@abstractmethod
def set_derived_image_size(self, derived_image, compressed_size):
"""
Sets the compressed size on the given derived image.
"""
@abstractmethod
def get_torrent_info(self, blob):
"""
Returns the torrent information associated with the given blob or None if none.
"""
@abstractmethod
def set_torrent_info(self, blob, piece_length, pieces):
"""
Sets the torrent infomation associated with the given blob to that specified.
"""
@abstractmethod
def get_repo_blob_by_digest(self, repository_ref, blob_digest, include_placements=False):
"""
Returns the blob in the repository with the given digest, if any or None if none.
Note that there may be multiple records in the same repository for the same blob digest, so
the return value of this function may change.
"""
@abstractmethod
def create_blob_upload(self, repository_ref, upload_id, location_name, storage_metadata):
"""
Creates a new blob upload and returns a reference.
If the blob upload could not be created, returns None.
"""
@abstractmethod
def lookup_blob_upload(self, repository_ref, blob_upload_id):
"""
Looks up the blob upload with the given ID under the specified repository and returns it or
None if none.
"""
@abstractmethod
def update_blob_upload(
self,
blob_upload,
uncompressed_byte_count,
piece_hashes,
piece_sha_state,
storage_metadata,
byte_count,
chunk_count,
sha_state,
):
"""
Updates the fields of the blob upload to match those given.
Returns the updated blob upload or None if the record does not exists.
"""
@abstractmethod
def delete_blob_upload(self, blob_upload):
"""
Deletes a blob upload record.
"""
@abstractmethod
def commit_blob_upload(self, blob_upload, blob_digest_str, blob_expiration_seconds):
"""
Commits the blob upload into a blob and sets an expiration before that blob will be GCed.
"""
@abstractmethod
def mount_blob_into_repository(self, blob, target_repository_ref, expiration_sec):
"""
Mounts the blob from another repository into the specified target repository, and adds an
expiration before that blob is automatically GCed.
This function is useful during push operations if an existing blob from another repository
is being pushed. Returns False if the mounting fails. Note that this function does *not*
check security for mounting the blob and the caller is responsible for doing this check (an
example can be found in endpoints/v2/blob.py).
"""
@abstractmethod
def set_tags_expiration_for_manifest(self, manifest, expiration_sec):
"""
Sets the expiration on all tags that point to the given manifest to that specified.
"""
@abstractmethod
def get_schema1_parsed_manifest(self, manifest, namespace_name, repo_name, tag_name, storage):
"""
Returns the schema 1 version of this manifest, or None if none.
"""
@abstractmethod
def create_manifest_with_temp_tag(
self, repository_ref, manifest_interface_instance, expiration_sec, storage
):
"""
Creates a manifest under the repository and sets a temporary tag to point to it.
Returns the manifest object created or None on error.
"""
@abstractmethod
def get_cached_namespace_region_blacklist(self, model_cache, namespace_name):
"""
Returns a cached set of ISO country codes blacklisted for pulls for the namespace or None if
the list could not be loaded.
"""
@abstractmethod
def convert_manifest(
self, manifest, namespace_name, repo_name, tag_name, allowed_mediatypes, storage
):
"""
Attempts to convert the specified into a parsed manifest with a media type in the
allowed_mediatypes set.
If not possible, or an error occurs, returns None.
"""
@abstractmethod
def yield_tags_for_vulnerability_notification(self, layer_id_pairs):
"""
Yields tags that contain one (or more) of the given layer ID pairs, in repositories which
have been registered for vulnerability_found notifications.
Returns an iterator of LikelyVulnerableTag instances.
"""
@abstractmethod
def find_repository_with_garbage(self, limit_to_gc_policy_s):
""" Returns a repository reference to a repository that contains garbage for collection
or None if none.
"""