Skip to content

Conversation

@rdimitrov
Copy link
Member

@rdimitrov rdimitrov commented Oct 21, 2025

Motivation and Context

The following PR:

  • Deprecates the existing OCI reference parser
  • Deprecates the existing OCI way of authenticating and accessing the image manifest
  • Replaces the above by leveraging go-containerregistry
  • Introduces support for Google Artifact Registry
  • Enables us to easily add support for other OCI-compliant registries in the future
  • Introduces better error handling
  • Introduces custom context timeouts for validation

How Has This Been Tested?

Breaking Changes

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Documentation update

Checklist

  • I have read the MCP Documentation
  • My code follows the repository's style guidelines
  • New and existing tests pass locally
  • I have added appropriate error handling
  • I have added or updated documentation as needed

Additional context

Related to #427

@rdimitrov rdimitrov requested a review from domdomegg October 22, 2025 09:34
name: "Docker Hub should be allowed",
identifier: "docker.io/test/image:latest",
// Will fail on image not found, but registry should be accepted
expectError: true,
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we find images that do work? So we can be more certain the tests are working properly.

Copy link
Member

@domdomegg domdomegg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Generally LGTM, could we fix the tests to use working images first though? (or at least validate that it's a 404 error rather than any error)

@rdimitrov rdimitrov force-pushed the allow-google-artifact-registry branch 4 times, most recently from 0c5d736 to ae78b7b Compare October 24, 2025 10:11
@rdimitrov rdimitrov requested a review from domdomegg October 24, 2025 11:26
domdomegg
domdomegg previously approved these changes Oct 27, 2025
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
@rdimitrov
Copy link
Member Author

Had to dismiss the approval so I can rebase and fix the conflict on go.mod

@rdimitrov rdimitrov merged commit 913147b into main Oct 28, 2025
6 checks passed
@rdimitrov rdimitrov deleted the allow-google-artifact-registry branch October 28, 2025 13:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants