Add release metadata to the released Docker images #2392
Description
There's no way to cross-check the Docker images we release against the source code that it was built from. We should add Docker labels that tracks release metadata.
The OCI spec defines a set of standard labels and these seem to be in use by many projects:
https://github.com/opencontainers/image-spec/blob/master/annotations.md#pre-defined-annotation-keys
We should add:
| Label | Content |
|---|---|
| org.opencontainers.image.created | timestamp |
| org.opencontainers.image.url | Link to github release notes? |
| org.opencontainers.image.documentation | Link to docs |
| org.opencontainers.image.source | Link to GitHub tarball download? |
| org.opencontainers.image.version | Release tag name |
| org.opencontainers.image.revision | Full git SHA |
| org.opencontainers.image.vendor | ??? |
| org.opencontainers.image.licenses | SPDX apache2 |
| org.opencontainers.image.title | Contour |
| org.opencontainers.image.description | descriptive text |