Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-2427

Quay should default support Cosign Media type and other defined supported media type

    XMLWordPrintable

Details

    • 0

    Description

      Description:

      This is an issue when checking the default supported OCI Media Type, as now by default Quay 3.6.0 doesn't support cosign OCI Media Type, pls check the List defined by Quay PM, and added the required OCI Media type to default supported list.

      Note: Quay image is quay-operator-bundle-container-v3.6.0-18

      https://issues.redhat.com/browse/PROJQUAY-1032

      The following is the list defined by Quay PM:

      Default types we need to support: We need several additional OCI types to increase adoption of Quay in evolving areas such as artifact signing, helm and alternate compression schemes:

      • application/vnd.oci.image.config.v1+json
      • application/vnd.cncf.helm.chart.config.v1+json
      • application/vnd.dev.cosign.simplesigning.v1+json
      • application/vnd.oci.image.layer.v1.tar+zstd

       

      $HOME/go/bin/cosign sign -key cosign.key quayv360.apps.quay-perf-738.perfscale.devcluster.openshift.com/qateam/zstd
Enter password for private key: 
Pushing signature to: quayv360.apps.quay-perf-738.perfscale.devcluster.openshift.com/qateam/zstd:sha256-e4ec5333c6f2bd64ea119a1873f8577a4887a7a84b73f18f94ad90d371cf9550.sig
error: signing quayv360.apps.quay-perf-738.perfscale.devcluster.openshift.com/qateam/zstd: uploading: PUT https://quayv360.apps.quay-perf-738.perfscale.devcluster.openshift.com/v2/qateam/zstd/manifests/sha256-e4ec5333c6f2bd64ea119a1873f8577a4887a7a84b73f18f94ad90d371cf9550.sig: MANIFEST_INVALID: manifest invalid; map[message:failed to parse manifest: manifest data does not match schema: 'application/vnd.dev.cosign.simplesigning.v1+json' is not one of ['application/vnd.oci.image.layer.v1.tar', 'application/vnd.oci.image.layer.v1.tar+gzip', 'application/vnd.oci.image.layer.v1.tar+zstd', 'application/vnd.oci.image.layer.nondistributable.v1.tar', 'application/vnd.oci.image.layer.nondistributable.v1.tar+gzip', 'application/tar+gzip']


Failed validating 'enum' in schema['properties']['layers']['items']['properties']['mediaType']:
    {'description': 'The MIME type of the referenced manifest',
     'enum': ['application/vnd.oci.image.layer.v1.tar',
              'application/vnd.oci.image.layer.v1.tar+gzip',
              'application/vnd.oci.image.layer.v1.tar+zstd',
              'application/vnd.oci.image.layer.nondistributable.v1.tar',
              'application/vnd.oci.image.layer.nondistributable.v1.tar+gzip',
              'application/tar+gzip'],
     'type': 'string'}


On instance['layers'][0]['mediaType']:
    'application/vnd.dev.cosign.simplesigning.v1+json']

      Attachments

        Issue Links

          blocks

          Task - Represents a small unit of work that is not end-user facing. PROJQUAY-2295 Document OCI mime types

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              jonathankingfc Jonathan King
              lzha1981 luffy zhang
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: