Annotate Sveltos Images with OCI annotations

[jkroepke]

We are using Renovate to track dependencies of Sveltos Images. However, renovate could not identity the sourceUrl of an Images and could not offer a Chanelog for the tracked dependency.

It would be great, if Sveltos images could be annotated with OCI annotation.

Ref: https://github.com/renovatebot/renovate/blob/27b6d833f03332a5eb92fe95101b578dd3772071/lib/modules/datasource/docker/readme.md

[gianlucam76]

Starting from v1.13.0 all Sveltos images have following labels (example taken from addon-controller image)

LABEL org.opencontainers.image.source="https://github.com/projectsveltos/addon-controller" \
      org.opencontainers.image.url="https://projectsveltos.io" \
      org.opencontainers.image.licenses="Apache-2.0" \
      org.opencontainers.image.vendor="projectsveltos" \
      org.opencontainers.image.title="addon-controller" \
      org.opencontainers.image.description="Deploys Kubernetes add-ons and applications (Helm charts, Kustomize, raw YAML) across fleets of clusters, with built-in multi-tenancy support." \
      org.opencontainers.image.version="$GIT_VERSION" \
      org.opencontainers.image.revision="$GIT_VERSION"

with GIT_VERSION equals to release tag

[jkroepke]

Great! Thanks. May consider to use the commit SHA as value for org.opencontainers.image.revision instead just the tag, since git tags are mutable in theory.