# frozen_string_literal: true module DependencyProxy class FindOrCreateManifestService < DependencyProxy::BaseService def initialize(group, image, tag, token) @group = group @image = image @tag = tag @token = token @file_name = "#{@image}:#{@tag}.json" @manifest = nil end def execute @manifest = @group.dependency_proxy_manifests .active .find_or_initialize_by_file_name_or_digest(file_name: @file_name, digest: @tag) head_result = DependencyProxy::HeadManifestService.new(@image, @tag, @token).execute if cached_manifest_matches?(head_result) @manifest.touch return success(manifest: @manifest, from_cache: true) end pull_new_manifest respond(from_cache: false) rescue Timeout::Error, *Gitlab::HTTP::HTTP_ERRORS respond end private def pull_new_manifest DependencyProxy::PullManifestService.new(@image, @tag, @token).execute_with_manifest do |new_manifest| @manifest.update!( content_type: new_manifest[:content_type], digest: new_manifest[:digest], file: new_manifest[:file], size: new_manifest[:file].size ) end end def cached_manifest_matches?(head_result) return false if head_result[:status] == :error @manifest && @manifest.digest == head_result[:digest] && @manifest.content_type == head_result[:content_type] end def respond(from_cache: true) if @manifest.persisted? # Technical debt: change to read_at https://gitlab.com/gitlab-org/gitlab/-/issues/341536 @manifest.touch if from_cache success(manifest: @manifest, from_cache: from_cache) else error('Failed to download the manifest from the external registry', 503) end end end end