Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-2427

Quay should default support Cosign Media type and other defined supported media type

XMLWordPrintable

      Description:

      This is an issue when checking the default supported OCI Media Type, as now by default Quay 3.6.0 doesn't support cosign OCI Media Type, pls check the List defined by Quay PM, and added the required OCI Media type to default supported list.

      Note: Quay image is quay-operator-bundle-container-v3.6.0-18

      https://issues.redhat.com/browse/PROJQUAY-1032

      The following is the list defined by Quay PM:

      Default types we need to support: We need several additional OCI types to increase adoption of Quay in evolving areas such as artifact signing, helm and alternate compression schemes:

      • application/vnd.oci.image.config.v1+json
      • application/vnd.cncf.helm.chart.config.v1+json
      • application/vnd.dev.cosign.simplesigning.v1+json
      • application/vnd.oci.image.layer.v1.tar+zstd

       

      $HOME/go/bin/cosign sign -key cosign.key quayv360.apps.quay-perf-738.perfscale.devcluster.openshift.com/qateam/zstd
Enter password for private key: 
Pushing signature to: quayv360.apps.quay-perf-738.perfscale.devcluster.openshift.com/qateam/zstd:sha256-e4ec5333c6f2bd64ea119a1873f8577a4887a7a84b73f18f94ad90d371cf9550.sig
error: signing quayv360.apps.quay-perf-738.perfscale.devcluster.openshift.com/qateam/zstd: uploading: PUT https://quayv360.apps.quay-perf-738.perfscale.devcluster.openshift.com/v2/qateam/zstd/manifests/sha256-e4ec5333c6f2bd64ea119a1873f8577a4887a7a84b73f18f94ad90d371cf9550.sig: MANIFEST_INVALID: manifest invalid; map[message:failed to parse manifest: manifest data does not match schema: 'application/vnd.dev.cosign.simplesigning.v1+json' is not one of ['application/vnd.oci.image.layer.v1.tar', 'application/vnd.oci.image.layer.v1.tar+gzip', 'application/vnd.oci.image.layer.v1.tar+zstd', 'application/vnd.oci.image.layer.nondistributable.v1.tar', 'application/vnd.oci.image.layer.nondistributable.v1.tar+gzip', 'application/tar+gzip']


Failed validating 'enum' in schema['properties']['layers']['items']['properties']['mediaType']:
    {'description': 'The MIME type of the referenced manifest',
     'enum': ['application/vnd.oci.image.layer.v1.tar',
              'application/vnd.oci.image.layer.v1.tar+gzip',
              'application/vnd.oci.image.layer.v1.tar+zstd',
              'application/vnd.oci.image.layer.nondistributable.v1.tar',
              'application/vnd.oci.image.layer.nondistributable.v1.tar+gzip',
              'application/tar+gzip'],
     'type': 'string'}


On instance['layers'][0]['mediaType']:
    'application/vnd.dev.cosign.simplesigning.v1+json']

              jonathankingfc Jonathan King
              lzha1981 luffy zhang
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: