add oci tags endpoint

app/controllers/api/v1/release_engines/oci/tags_controller.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+module Api::V1::ReleaseEngines
+  class Oci::TagsController < Api::V1::BaseController
+    before_action :require_ee!
+    before_action :scope_to_current_account!
+    before_action :require_active_subscription!
+    before_action :authenticate_with_token
+    before_action :set_package
+
+    def index
+      authorize! package, to: :show?
+
+      releases = authorized_scope(package.releases).preload(:product, :constraints, :entitlements)
+      authorize! releases
+
+      tags = releases.where.not(tag: nil)
+                     .reorder(tag: :asc)
+                     .pluck(:tag)
+
+      render json: {
+        name: package.key,
+        tags:,
+      }
+    end
+
+    private
+
+    attr_reader :package
+
+    def require_ee! = super(entitlements: %i[oci_engine])
+
+    def set_package
+      scoped_packages = authorized_scope(current_account.release_packages.oci)
+
+      @package = Current.resource = FindByAliasService.call(
+        scoped_packages,
+        id: params[:package],
+        aliases: :key,
+      )
+    end
+  end
+end

config/routes.rb

@@ -108,7 +108,7 @@
 
   concern :oci do
     # NOTE(ezekg) /v2 namespace is handled outside of this because docker wants it to always be at the root...
-    scope module: :oci, defaults: { format: :binary } do
+    scope module: :oci, defaults: { format: :json } do
       # see: https://github.com/opencontainers/distribution-spec/blob/main/spec.md#pulling-manifests
       match ':package/manifests/:reference', via: %i[head get], to: 'manifests#show', as: :oci_manifest, constraints: {
         package: /[^\/]*/,
@@ -121,6 +121,11 @@
         digest: /[^\/]*/,
       }
 
+      # see: https://github.com/opencontainers/distribution-spec/blob/main/spec.md#listing-tags
+      get ':package/tags/list', to: 'tags#index', as: :oci_tags, constraints: {
+        package: /[^\/]*/,
+      }
+
       # ignore other requests entirely for now e.g. GET /v2/:namespace/referrers/:digest
       match '*wildcard', via: :all, to: -> env { [405, {}, []] }
     end

features/api/v1/engines/oci/blobs.feature

@@ -117,7 +117,7 @@ Feature: OCI image blobs
     Then the response status should be "403"
     And the response should contain the following raw headers:
       """
-      Content-Type: application/vnd.api+json; charset=utf-8
+      Content-Type: application/json; charset=utf-8
       """
 
   @mp

features/api/v1/engines/oci/manifests.feature

@@ -117,7 +117,7 @@ Feature: OCI image manifests
     Then the response status should be "403"
     And the response should contain the following raw headers:
       """
-      Content-Type: application/vnd.api+json; charset=utf-8
+      Content-Type: application/json; charset=utf-8
       """
 
   @mp
@@ -225,7 +225,7 @@ Feature: OCI image manifests
     Then the response status should be "404"
     And the response should contain the following raw headers:
       """
-      Content-Type: application/vnd.api+json; charset=utf-8
+      Content-Type: application/json; charset=utf-8
       """
 
   Scenario: Endpoint should return an image index by version