Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport v2.3] fix(oci/config): ensure unique OCI image config #2331

Merged
merged 1 commit into from
Mar 7, 2024

Conversation

adamreese
Copy link
Contributor

Backporting #2322 to v2.3

This commit ensures that applications pushed to OCI have unique image
config fields for unique Spin application content and metadata by adding
a label in the OCI image config to the content digest (SHA256) of the
Spin locked application file.

This is to address the issue of the Containerd Spin shim serving
outdated content, because all images of Spin apps on a node would have the
same image ID (the content digest of the OCI config object, which was
identical for all Spin apps).

ref spinframework/spin-operator#40

Signed-off-by: Radu Matei <radu@fermyon.com>

Co-authored-by: Rajat Jindal <rajatjindal83@gmail.com>
Co-authored-by: Danielle Lancashire <dani@builds.terrible.systems>
Co-authored-by: Michelle Dhanani <michelle@fermyon.com>
(cherry picked from commit 14cdc42)
@adamreese adamreese merged commit ee9d4a9 into v2.3 Mar 7, 2024
10 checks passed
@adamreese adamreese deleted the backport-2322-to-v2.3 branch March 7, 2024 20:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants