12 Commits (dfec34e2dee69521d52d3ae753f8e6830d1cf477)

Author	SHA1	Message	Date
John Howard	82a2abf512	Update oras-go to v0.4.0 ... Signed-off-by: John Howard <howardjohn@google.com>	3 years ago
Matthew Fisher	4801818f7c	Switch to distribution v3 ... Signed-off-by: Matthew Fisher <matt.fisher@microsoft.com>	3 years ago
Nicolas De Loof	663c569887	Migrate to oras-go library ... see https://github.com/deislabs/oras/pull/265 Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>	3 years ago
Peter Engelbert	3028c55858	Clean up imports and add doc comments ... Additionally, revert `NewPull()` to its existing signature. Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>	4 years ago
Peter Engelbert	3ad08f3ea9	Implement `helm pull` for OCI registries ... * Implement `helm dep update` for oci dependencies * New unit tests * Remove `helm chart pull` command * New `helm pull` does not depend on registry cache Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>	4 years ago
Peter Engelbert	f11e74ee57	Add unit test for man-in-the-middle attack on pull ... Add a unit test that proves the digest of the received content being checked. The check should ensure that the digest of the received content is identical to the digest provided by the manifest in the layers[0] descriptor. This check is currently implemented in containerd, so the unit test ensures security in the case a breaking change is made in containerd. Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>	5 years ago
Matt Butcher	16024dc19a	fix: add new static linter and fix issues it found (#7655) ... * fix: add new static linter and fix issues it found Signed-off-by: Matt Butcher <matt.butcher@microsoft.com> * fixed two additional linter errors. Signed-off-by: Matt Butcher <matt.butcher@microsoft.com>	5 years ago
Josh Dolitsky	7ce29e12fa	ref(go.mod): oras v0.8.1 (#6862) ... * ref(go.mod): oras v0.8.1 Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * update various module versions Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * upgrade oras v0.8.1 Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * upgrade to oras 0.8.1 release Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com> * lock to oras release (0.8.1) Signed-off-by: Josh Dolitsky <393494+jdolitsky@users.noreply.github.com>	5 years ago
Matt Farina	9bc7934f35	Updating the module for v3 as the major version ... Signed-off-by: Matt Farina <matt@mattfarina.com>	5 years ago
Josh Dolitsky	af06037d23	chore(registry): upgrade to oras v0.7.0 (#6285) ... Also: * add --insecure flag to "registry login" * fix bug parsing correct tag when port number present Signed-off-by: Josh Dolitsky <jdolitsky@gmail.com>	5 years ago
Josh Dolitsky	6095070817	ref(internal/experimental/registry): pkg refactor (#6205) ... No more magic separating the metadata from chart tarball - charts are pushed to registry as a single tarball layer with Chart.yaml in tact. No more fragile custom symlink chart storage, now following the OCI Image Layout Specification for chart filesystem cache. Also: - Update to ORAS 0.6.0 - Simplify registry client setup with NewClientWithDefaults() - Remove needless annotations and constants Fixes #6068 Fixes #6141 Signed-off-by: Josh Dolitsky <jdolitsky@gmail.com>	5 years ago
Matthew Fisher	fe952445bd	feat(cmd): put OCI commands behind a feature gate ... This adds a new `gates` package used for interacting with feature gates. It also marks the OCI registry work as experimental, signalling to users that it is not a stable feature of Helm. Signed-off-by: Matthew Fisher <matt.fisher@microsoft.com>	5 years ago