feat(oci): oci helm support [r8s-361] (#787)

pkg/liboras/registry.go

@@ -0,0 +1,79 @@
+package liboras
+
+import (
+	"strings"
+
+	portainer "github.com/portainer/portainer/api"
+	"github.com/rs/zerolog/log"
+	"oras.land/oras-go/v2/registry/remote"
+	"oras.land/oras-go/v2/registry/remote/auth"
+	"oras.land/oras-go/v2/registry/remote/retry"
+)
+
+func CreateClient(registry portainer.Registry) (*remote.Registry, error) {
+	registryClient, err := remote.NewRegistry(registry.URL)
+	if err != nil {
+		log.Error().Err(err).Str("registryUrl", registry.URL).Msg("Failed to create registry client")
+		return nil, err
+	}
+	// By default, oras sends multiple requests to get the full list of repos/tags/referrers.
+	// set a high page size limit for fewer round trips.
+	// e.g. https://github.com/oras-project/oras-go/blob/v2.6.0/registry/remote/registry.go#L129-L142
+	registryClient.RepositoryListPageSize = 1000
+	registryClient.TagListPageSize = 1000
+	registryClient.ReferrerListPageSize = 1000
+
+	// Only apply authentication if explicitly enabled AND credentials are provided
+	if registry.Authentication &&
+		strings.TrimSpace(registry.Username) != "" &&
+		strings.TrimSpace(registry.Password) != "" {
+
+		registryClient.Client = &auth.Client{
+			Client: retry.DefaultClient,
+			Cache:  auth.NewCache(),
+			Credential: auth.StaticCredential(registry.URL, auth.Credential{
+				Username: registry.Username,
+				Password: registry.Password,
+			}),
+		}
+
+		log.Debug().
+			Str("registryURL", registry.URL).
+			Str("registryType", getRegistryTypeName(registry.Type)).
+			Bool("authentication", true).
+			Msg("Created ORAS registry client with authentication")
+	} else {
+		// Use default client for anonymous access
+		registryClient.Client = retry.DefaultClient
+
+		log.Debug().
+			Str("registryURL", registry.URL).
+			Str("registryType", getRegistryTypeName(registry.Type)).
+			Bool("authentication", false).
+			Msg("Created ORAS registry client for anonymous access")
+	}
+
+	return registryClient, nil
+}
+
+// getRegistryTypeName returns a human-readable name for the registry type
+func getRegistryTypeName(registryType portainer.RegistryType) string {
+	switch registryType {
+	case portainer.QuayRegistry:
+		return "Quay"
+	case portainer.AzureRegistry:
+		return "Azure"
+	case portainer.CustomRegistry:
+		return "Custom"
+	case portainer.GitlabRegistry:
+		return "GitLab"
+	case portainer.ProGetRegistry:
+		return "ProGet"
+	case portainer.DockerHubRegistry:
+		return "DockerHub"
+	case portainer.EcrRegistry:
+		return "ECR"
+	default:
+		return "Unknown"
+	}
+}