Merge pull request #91 from chainguard-dev/create-pull-request/patch

Export mono/sdk: refs/heads/main

Author: k4leung4

go.mod

@@ -90,7 +90,7 @@ require (
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
 	golang.org/x/crypto v0.36.0 // indirect
-	golang.org/x/net v0.37.0 // indirect
+	golang.org/x/net v0.38.0 // indirect
 	golang.org/x/sys v0.31.0 // indirect
 	golang.org/x/text v0.23.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250313205543-e70fdf4c4cb4 // indirect

go.sum

@@ -278,8 +278,8 @@ golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLL
 golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
-golang.org/x/net v0.37.0 h1:1zLorHbz+LYj7MQlSf1+2tPIIgibq2eL5xkrGk6f+2c=
-golang.org/x/net v0.37.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8=
+golang.org/x/net v0.38.0 h1:vRMAPTMaeGqVhG5QyLJHqNDwecKTomGeqbnfZyKlBI8=
+golang.org/x/net v0.38.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.28.0 h1:CrgCKl8PPAVtLnU3c+EDw6x11699EWlsDeWNWKdIOkc=
 golang.org/x/oauth2 v0.28.0/go.mod h1:onh5ek6nERTohokkhCD/y2cV4Do3fxFHFuAejCkRWT8=

proto/capabilities/roles.go

@@ -34,6 +34,8 @@ var (
 		Capability_CAP_BUILD_REPORT_LIST,
 
 		Capability_CAP_LIBRARIES_ENTITLEMENTS_LIST,
+
+		Capability_CAP_REGISTRY_ENTITLEMENTS_LIST,
 	},
 		// Viewers can also list repos and tags, and pull images.
 		RegistryPullCaps...), APKPullCaps...))

proto/platform/registry/v1/registry_entitlements.platform.pb.go

@@ -10,6 +10,7 @@ package chainguard.platform.registry;
 import "google/protobuf/timestamp.proto";
 import "registry.platform.proto";
 import "google/api/annotations.proto";
+import "google/api/field_behavior.proto";
 import "annotations/auth.proto";
 
 // Entitlements is a service for viewing configuration and features enabled on a registry.
@@ -35,6 +36,18 @@ service Entitlements {
       }
     };
   }
+
+  // Summary provides a group-level summary of entitlements.
+  rpc Summary(EntitlementSummaryRequest) returns (EntitlementSummaryResponse) {
+    option (google.api.http) = {
+      get: "/registry/v1/entitlements/{parent=**}:summary"
+    };
+    option (chainguard.annotations.iam) = {
+      enabled: {
+        capabilities: [CAP_REGISTRY_ENTITLEMENTS_LIST]
+      }
+    };
+  }
 }
 
 // Entitlement contains information about what an organization is entitled to.
@@ -75,6 +88,9 @@ message EntitlementImage {
   string id = 1 ;
   // The image repository catalog tier the image is associated with.
   chainguard.platform.registry.CatalogTier tier = 2;
+
+  // Human-readable image name corresponding to id.
+  string name = 3 [(google.api.field_behavior) = OUTPUT_ONLY];
 }
 
 message EntitlementImagesFilter {
@@ -84,3 +100,14 @@ message EntitlementImagesFilter {
 message EntitlementImagesList {
   repeated EntitlementImage images = 1;
 }
+
+message EntitlementSummaryRequest {
+  string parent = 1 [(chainguard.annotations.iam_scope) = true];
+}
+
+message EntitlementSummaryResponse {
+  // Keys can't be enum types, but string should match CatalogTier.
+  map<string, ImageQuota> quota = 1;
+  // last updated time
+  google.protobuf.Timestamp last_updated_time = 2;
+}

proto/platform/registry/v1/registry_entitlements.platform.pb.gw.go

@@ -22,6 +22,7 @@ type MockEntitlementsClient struct {
 
 	OnListEntitlements      []ListOnEntitlements
 	OnListEntitlementImages []ListOnEntitlementImages
+	OnGetEntitlementSummary []GetOnEntitlementSummary
 }
 
 type ListOnEntitlements struct {
@@ -36,6 +37,12 @@ type ListOnEntitlementImages struct {
 	Error error
 }
 
+type GetOnEntitlementSummary struct {
+	Given *registry.EntitlementSummaryRequest
+	Get   *registry.EntitlementSummaryResponse
+	Error error
+}
+
 func (m *MockEntitlementsClient) ListEntitlements(_ context.Context, given *registry.EntitlementFilter, _ ...grpc.CallOption) (*registry.EntitlementList, error) {
 	for _, o := range m.OnListEntitlements {
 		if cmp.Equal(o.Given, given, protocmp.Transform()) {
@@ -53,3 +60,12 @@ func (m *MockEntitlementsClient) ListEntitlementImages(_ context.Context, given
 	}
 	return nil, fmt.Errorf("mock not found for %v", given)
 }
+
+func (m *MockEntitlementsClient) Summary(_ context.Context, given *registry.EntitlementSummaryRequest, _ ...grpc.CallOption) (*registry.EntitlementSummaryResponse, error) {
+	for _, o := range m.OnGetEntitlementSummary {
+		if cmp.Equal(o.Given, given, protocmp.Transform()) {
+			return o.Get, o.Error
+		}
+	}
+	return nil, fmt.Errorf("mock not found for %v", given)
+}