kcl-lang / kpm / 33315868750

47%

main: 47%

Build Type

Pull #766

github

Committed by Peefy

Commit Message

feat(auth): pluggable OCI credential providers for kpm login

Add a small pkg/auth package with a Provider interface and a
GCPProvider implementation that mints OCI credentials from the
GCE/GKE metadata server (Workload Identity). The existing
username/password flow becomes the default BasicProvider.

kpm login gains a --provider flag:

  kpm login gcr.io/<project> --provider=gcp   # WI federated
  kpm login ghcr.io -u u -p p                 # unchanged

Why: function-kcl #251 asks for OCI pulls without static
credentials. The OCI client is reached through kpm
(kcl-lang.io/kpm/pkg/client.LoginOci), so the provider abstraction
sits in kpm; function-kcl wires --provider in a follow-up.

No behaviour change for --provider=basic (the default).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Peefy <xpf6677@163.com>

Pull Request Pull Request #766: feat(auth): pluggable OCI credential providers for kpm login

Coverage Stats

103 of 118 new or added lines in 4 files covered. (87.29%)

13 existing lines in 2 files now uncovered.

5056 of 10872 relevant lines covered (46.5%)

0.53 hits per line