Description

Docker manifest create can work with remote image references without pulling the actual image layers. This saves significant time and bandwidth in the manifest creation jobs.

The manifest only needs the image metadata, not the full image content, so pulling images before creating the manifest is wasteful.

Affects:

• push_image_manifest_lists (main images)
• push_operator_manifest_lists (operator)
• push_scanner_image_manifest_lists (scanner v4)

User-facing documentation

• CHANGELOG.md is updated OR update is not needed
• documentation PR is created and is linked above OR is not needed

Testing and quality

• the change is production ready: the change is GA, or otherwise the functionality is gated by a feature flag
• CI results are inspected

Automated testing

• added unit tests
• added e2e tests
• added regression tests
• added compatibility tests
• modified existing tests

How I validated my change

CI

# docker manifest inspect quay.io/rhacs-eng/stackrox-operator:4.11.0-437-gc9c8fe4ecf
{
   "schemaVersion": 2,
   "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json",
   "manifests": [
      {
         "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
         "size": 740,
         "digest": "sha256:6da8f6a54195552498169202df1ad54a9c0ff81b3a6f677712b68d64e76daffe",
         "platform": {
            "architecture": "amd64",
            "os": "linux"
         }
      },
      {
         "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
         "size": 740,
         "digest": "sha256:d0cb02e692dac92d3614822c747759625d6c71868a0bf3381ee29ee3d06ec305",
         "platform": {
            "architecture": "arm64",
            "os": "linux"
         }
      }
   ]
}