1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
# coding: utf-8
# -------------------------------------------------------------------------
# Copyright (c) Microsoft Corporation. All rights reserved.
# Licensed under the MIT License. See License.txt in the project root for
# license information.
# --------------------------------------------------------------------------
"""
FILE: sample_set_image_properties_async.py
DESCRIPTION:
This sample demonstrates setting an image's properties on the tag so it can't be overwritten during a lengthy
deployment.
USAGE:
python sample_set_image_properties_async.py
Set the environment variables with your own values before running the sample:
1) CONTAINERREGISTRY_ENDPOINT - The URL of you Container Registry account
This sample assumes your registry has a repository "library/hello-world" with image tagged "v1".
"""
import asyncio
import os
from dotenv import find_dotenv, load_dotenv
from azure.containerregistry.aio import ContainerRegistryClient
from samples.sample_utilities import load_registry, get_authority, get_audience, get_credential
class SetImagePropertiesAsync(object):
def __init__(self):
load_dotenv(find_dotenv())
self.endpoint = os.environ.get("CONTAINERREGISTRY_ENDPOINT")
self.authority = get_authority(self.endpoint)
self.audience = get_audience(self.authority)
self.credential = get_credential(
self.authority, exclude_environment_credential=True, is_async=True
)
async def set_image_properties(self):
load_registry()
# Instantiate an instance of ContainerRegistryClient
async with ContainerRegistryClient(self.endpoint, self.credential, audience=self.audience) as client:
# Set permissions on the v1 image's "latest" tag
await client.update_manifest_properties(
"library/hello-world",
"v1",
can_write=False,
can_delete=False
)
# After this update, if someone were to push an update to `<registry endpoint>\library\hello-world:v1`,
# it would fail. It's worth noting that if this image also had another tag, such as `latest`,
# and that tag did not have permissions set to prevent reads or deletes, the image could still be
# overwritten. For example, if someone were to push an update to `<registry endpoint>\hello-world:latest`
# (which references the same image), it would succeed.
async def main():
sample = SetImagePropertiesAsync()
await sample.set_image_properties()
if __name__ == "__main__":
asyncio.run(main())
|
