pomerium / pomerium / 23820675490

52%

Build Type

push

github

Committed by web-flow

Commit Message

update get-envoy tool to fetch binaries from oci images (#6183)

This replaces the get-envoy tool with a new implementation that fetches
binaries from OCI images published to
https://github.com/orgs/pomerium/packages?repo_name=envoy-custom using
the bazel rules added here:
https://github.com/pomerium/envoy-custom/pull/169

The images are automatically tagged with the go module pseudo-version
suffix string of the form `timestamp-commithash` where `timestamp` has
the format `20060102150405` and `commithash` is the git commit hash
truncated to the first 12 bytes. Tagged releases also tag the respective
images with the release version in addition to the pseudo-version tag.
When the get-envoy tool is run, it reads this version string from the
`github.com/pomerium/envoy-custom` dependency in the current module and
fetches the oci image with the matching tag.

The tag must point to an oci image index (multi platform image)
containing manifests for each supported os/arch. For example, it would
look something like this:
```json
{
  "schemaVersion": 2,
  "mediaType": "application/vnd.oci.image.index.v1+json",
  "manifests": [
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "size": 915,
      "digest": "sha256:aeb6d011019bc21c1f8296c0df8b8d24e",
      "platform": {
        "architecture": "x86_64",
        "os": "linux"
      }
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "size": 915,
      "digest": "sha256:1ad4dec5d492a8591f7dda457384c497c",
      "platform": {
        "architecture": "aarch64",
        "os": "linux"
      }
    },
    {
      "mediaType": "application/vnd.oci.image.manifest.v1+json",
      "size": 915,
      "digest": "sha256:cf0fb32c7b867b0f6ddb6b58c24308682",
      "platform": {
        "architecture": "aarch64",
        "os": "darwin"
      }
    }
  ]
}
```

The tool will extract ... (continued)

Coverage Stats

2 of 301 new or added lines in 12 files covered. (0.66%)

23 existing lines in 7 files now uncovered.

34878 of 77145 relevant lines covered (45.21%)

114.77 hits per line