OCI — Multi-Registry and Air-Gapped Support (issue 10 of 29)

[gabemontero]

Labels: ready-to-code
Depends on: Issue 1 (#4039 shared infra), Issue 9 (#TBD core connector)
RHIDP Stories: RHIDP-15297
Feature: RHDHPLAN-1507 — Epic RHIDP-15294

Add multi-registry configuration support (distinct credentials, CA bundles, and sync schedules per registry instance), K8s pull secret loader with Docker config.json parsing, custom CA bundle integration via shared @red-hat-developer-hub/backstage-plugin-boost-connector-utils, and air-gapped registry support with no external DNS resolution.

Tasks

From openspec/changes/oci-skill-registry/tasks.md group 4 (RHIDP-15297):

• 4.1 Define app-config schema for ai-catalog-oci-skill-registry with registry instances
• 4.2 Implement config parser with validation
• 4.3 Implement Secret loader for registry credentials
• 4.4 Implement ConfigMap/Secret loader for custom CA bundles
• 4.5 Implement per-registry sync interval scheduling
• 4.6–4.7 Unit tests and integration test for multi-registry

From openspec/changes/oci-skill-connector/tasks.md group 4 (RHIDP-15327):

• 4.1–4.15 Auth and air-gapped: K8s pull secret loader, Docker config.json parsing, Basic Auth, missing pull secret handling, custom CA bundle, shared CA utility integration, system CA fallback, per-registry auth, credential reuse, air-gapped registry support, DNS resolution failure handling, unit and integration tests

Specifications

• openspec/changes/oci-skill-registry/specs/multi-registry-config/spec.md

[fullsend-ai-triage]

🤖 Finished Triage · ✅ Success · Started 8:01 PM UTC · Completed 8:03 PM UTC
Commit: e03b281 · View workflow run →

[fullsend-ai-triage]

Triage Summary

This issue is blocked on two open prerequisites that it explicitly depends on:

1. Cross-Connector Shared Infrastructure Package (issue 1 of 29) #4039 — Cross-Connector Shared Infrastructure Package (issue 1 of 29): Still open. This issue needs the shared @boost/connector-utils package for custom CA bundle integration (tasks 4.6–4.7 in the connector task list reference shared CA utility integration).
2. OCI Skill Registry — Core Connector (issue 9 of 29) #4047 — OCI Skill Registry Core Connector (issue 9 of 29): Still open. The core connector is the foundation on which multi-registry configuration, per-registry auth, and air-gapped support are built.

No open PRs currently address either prerequisite or this issue itself. Once both dependencies are resolved, this issue's tasks (multi-registry config schema, K8s pull secret loader, Docker config.json parsing, custom CA bundles, air-gapped registry support) can proceed.

Marking as blocked until prerequisites are met.

Blocked by:

• Cross-Connector Shared Infrastructure Package (issue 1 of 29) #4039
• OCI Skill Registry — Core Connector (issue 9 of 29) #4047

[fullsend-ai-triage]

🤖 Finished Triage · ✅ Success · Started 7:35 PM UTC · Completed 7:37 PM UTC
Commit: 1b270c9 · View workflow run →

[fullsend-ai-triage]

Triage Summary (re-assessed)

This issue remains blocked on two open prerequisites — no changes since the prior triage:

1. Cross-Connector Shared Infrastructure Package (issue 1 of 29) #4039 — Cross-Connector Shared Infrastructure Package (status: open, labeled triaged/feature). This issue needs the shared @red-hat-developer-hub/backstage-plugin-boost-connector-utils package for custom CA bundle integration (tasks 4.6–4.7 in the connector task list).
2. OCI Skill Registry — Core Connector (issue 9 of 29) #4047 — OCI Skill Registry Core Connector (status: open, labeled blocked). The core connector is the foundation on which multi-registry configuration, per-registry auth, and air-gapped support are built. Note that OCI Skill Registry — Core Connector (issue 9 of 29) #4047 is itself blocked, creating a dependency chain.

No open PRs currently address either prerequisite or this issue. Once both dependencies are resolved, the tasks here (multi-registry config schema, K8s pull secret loader, Docker config.json parsing, custom CA bundles, air-gapped registry support) can proceed.

Keeping as blocked until prerequisites are met.

Blocked by:

• Cross-Connector Shared Infrastructure Package (issue 1 of 29) #4039
• OCI Skill Registry — Core Connector (issue 9 of 29) #4047