Allow tags to be marked as hidden. Create a hidden tag on every image during a push to prevent them from getting GCed.

data/model/legacy.py

@@ -5,6 +5,7 @@ import json
 import time
 
 from datetime import datetime, timedelta, date
+from uuid import uuid4
 
 from data.database import (User, Repository, Image, AccessToken, Role, RepositoryPermission,
                            Visibility, RepositoryTag, EmailConfirmation, FederatedLogin,
@@ -1561,15 +1562,20 @@ def _tag_alive(query):
                      (RepositoryTag.lifetime_end_ts > int(time.time())))
 
 
-def list_repository_tags(namespace_name, repository_name):
-  return _tag_alive(RepositoryTag
-                    .select(RepositoryTag, Image)
-                    .join(Repository)
-                    .join(Namespace, on=(Repository.namespace_user == Namespace.id))
-                    .switch(RepositoryTag)
-                    .join(Image)
-                    .where(Repository.name == repository_name,
-                           Namespace.username == namespace_name))
+def list_repository_tags(namespace_name, repository_name, include_hidden=False):
+  query = _tag_alive(RepositoryTag
+                     .select(RepositoryTag, Image)
+                     .join(Repository)
+                     .join(Namespace, on=(Repository.namespace_user == Namespace.id))
+                     .switch(RepositoryTag)
+                     .join(Image)
+                     .where(Repository.name == repository_name,
+                            Namespace.username == namespace_name))
+
+  if not include_hidden:
+    query = query.where(RepositoryTag.hidden == False)
+
+  return query
 
 
 def _garbage_collect_tags(namespace_name, repository_name):
@@ -1786,10 +1792,8 @@ def create_or_update_tag(namespace_name, repository_name, tag_name,
       # No tag that needs to be ended
       pass
 
-    tag = RepositoryTag.create(repository=repo, image=image, name=tag_name,
-                               lifetime_start_ts=now_ts)
-
-    return tag
+    return RepositoryTag.create(repository=repo, image=image, name=tag_name,
+                                lifetime_start_ts=now_ts)
 
 
 def delete_tag(namespace_name, repository_name, tag_name):
@@ -1812,6 +1816,17 @@ def delete_tag(namespace_name, repository_name, tag_name):
     found.save()
 
 
+def create_temporary_hidden_tag(repo, image, expiration_s):
+  """ Create a tag with a defined timeline, that will not appear in the UI or CLI. Returns the name
+      of the temporary tag. """
+  now_ts = int(time.time())
+  expire_ts = now_ts + expiration_s
+  tag_name = str(uuid4())
+  RepositoryTag.create(repository=repo, image=image, name=tag_name, lifetime_start_ts=now_ts,
+                       lifetime_end_ts=expire_ts, hidden=True)
+  return tag_name
+
+
 def purge_all_repository_tags(namespace_name, repository_name):
   """ Immediately purge all repository tags without respecting the lifeline procedure """
   try: