debian-mirror-gitlab/spec/support/helpers/ci/template_helpers.rb

# frozen_string_literal: true

module Ci
  module TemplateHelpers
    def template_registry_host
      'registry.gitlab.com'
    end

    def auto_build_image_repository
      "gitlab-org/cluster-integration/auto-build-image"
    end

    def public_image_exist?(registry, repository, image)
      public_image_manifest(registry, repository, image).present?
    end

    def public_image_manifest(registry, repository, reference)
      token = public_image_repository_token(registry, repository)

      headers = {
        'Authorization' => "Bearer #{token}",
        'Accept' => 'application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.oci.image.index.v1+json'
      }
      response = with_net_connect_allowed do
        Gitlab::HTTP.get(image_manifest_url(registry, repository, reference), headers: headers)
      end

      if response.success?
        Gitlab::Json.parse(response.body)
      elsif response.not_found?
        nil
      else
        raise "Could not retrieve manifest: #{response.body}"
      end
    end

    def public_image_repository_token(registry, repository)
      @public_image_repository_tokens ||= {}
      @public_image_repository_tokens[[registry, repository]] ||=
        begin
          response = with_net_connect_allowed do
            Gitlab::HTTP.get(image_manifest_url(registry, repository, 'latest'))
          end

          raise 'Unauthorized' unless response.unauthorized?

          www_authenticate = response.headers['www-authenticate']
          raise 'Missing www-authenticate' unless www_authenticate

          realm, service, scope = www_authenticate.split(',').map { |s| s[/\w+="(.*)"/, 1] }
          token_response = with_net_connect_allowed do
            Gitlab::HTTP.get(realm, query: { service: service, scope: scope })
          end

          raise "Could not get token: #{token_response.body}" unless token_response.success?

          token_response['token']
        end
    end

    def image_manifest_url(registry, repository, reference)
      "#{registry}/v2/#{repository}/manifests/#{reference}"
    end
  end
end

Ci::TemplateHelpers.prepend_mod