Basic labels support

Adds basic labels support to the registry code (V2), and the API. Note that this does not yet add any UI related support.

test/test_api_security.py

@@ -52,6 +52,7 @@ from endpoints.api.superuser import (SuperUserLogs, SuperUserList, SuperUserMana
                                      SuperUserServiceKey, SuperUserServiceKeyApproval,
                                      SuperUserTakeOwnership)
 from endpoints.api.secscan import RepositoryImageSecurity
+from endpoints.api.manifest import RepositoryManifestLabels, ManageRepositoryManifestLabel
 
 
 try:
@@ -4298,5 +4299,54 @@ class TestRepositoryImageSecurity(ApiTestCase):
     self._run_test('GET', 404, 'devtable', None)
 
 
+class TestRepositoryManifestLabels(ApiTestCase):
+  def setUp(self):
+    ApiTestCase.setUp(self)
+    self._set_url(RepositoryManifestLabels, repository='devtable/simple', manifestref='sha256:abcd')
+
+  def test_get_anonymous(self):
+    self._run_test('GET', 401, None, None)
+
+  def test_get_freshuser(self):
+    self._run_test('GET', 403, 'freshuser', None)
+
+  def test_get_reader(self):
+    self._run_test('GET', 403, 'reader', None)
+
+  def test_get_devtable(self):
+    self._run_test('GET', 404, 'devtable', None)
+
+  def test_post_anonymous(self):
+    self._run_test('POST', 401, None, dict(key='foo', value='bar', media_type='text/plain'))
+
+  def test_post_freshuser(self):
+    self._run_test('POST', 403, 'freshuser', dict(key='foo', value='bar', media_type='text/plain'))
+
+  def test_post_reader(self):
+    self._run_test('POST', 403, 'reader', dict(key='foo', value='bar', media_type='text/plain'))
+
+  def test_post_devtable(self):
+    self._run_test('POST', 404, 'devtable', dict(key='foo', value='bar', media_type='text/plain'))
+
+
+class TestManageRepositoryManifestLabel(ApiTestCase):
+  def setUp(self):
+    ApiTestCase.setUp(self)
+    self._set_url(ManageRepositoryManifestLabel, repository='devtable/simple',
+                  manifestref='sha256:abcd', labelid='someid')
+
+  def test_delete_anonymous(self):
+    self._run_test('DELETE', 401, None, None)
+
+  def test_delete_freshuser(self):
+    self._run_test('DELETE', 403, 'freshuser', None)
+
+  def test_delete_reader(self):
+    self._run_test('DELETE', 403, 'reader', None)
+
+  def test_delete_devtable(self):
+    self._run_test('DELETE', 404, 'devtable', None)
+
+
 if __name__ == '__main__':
   unittest.main()