[Feature] [Platform] Installer move to OCI

Author: ajanikow

CHANGELOG.md

@@ -15,6 +15,7 @@
 - (Bugfix) (Platform) Ensure Inventory picks active leader
 - (Bugfix) (Platform) Reload Config on Inventory Change
 - (Bugfix) (Platform) Ensure Inventory uses the serving group for license generation
+- (Bugfix) (Platform) Installer move to OCI
 
 ## [1.3.1](https://github.com/arangodb/kube-arangodb/tree/1.3.1) (2025-10-07)
 - (Documentation) Add ArangoPlatformStorage Docs & Examples

docs/cli/arangodb_operator_platform.md

@@ -41,7 +41,6 @@ Available Commands:
   import      Imports the package from the ZIP format
   install     Installs the specified setup of the platform
   merge       Merges definitions into single file
-  registry    Points all images to the new registry
 
 Flags:
   -h, --help   help for package
@@ -83,9 +82,13 @@ Usage:
   arangodb_operator_platform package install [flags] ... packages
 
 Flags:
-  -h, --help                       help for install
-      --platform.endpoint string   Platform Repository URL (default "https://arangodb-platform-prd-chart-registry.s3.amazonaws.com")
-      --platform.name string       Kubernetes Platform Name (name of the ArangoDeployment)
+  -h, --help                               help for install
+      --license.client.id string           LicenseManager Client ID (ENV: LICENSE_CLIENT_ID)
+      --license.client.secret string       LicenseManager Client Secret (ENV: LICENSE_CLIENT_SECRET)
+      --license.endpoint string            LicenseManager Endpoint (default "license.arango.ai")
+      --platform.name string               Kubernetes Platform Name (name of the ArangoDeployment)
+      --registry.docker.credentials        Use Docker Credentials
+      --registry.docker.insecure strings   List of insecure registries
 
 Global Flags:
       --kubeconfig string   Kubernetes Config File
@@ -161,9 +164,8 @@ Flags:
       --arango.insecure                Arango Endpoint Insecure
       --arango.token string            Arango JWT Token for Authentication
   -h, --help                           help for activate
-      --license.client.id string       LicenseManager Client ID
-      --license.client.secret string   LicenseManager Client Secret
-      --license.client.stage strings   LicenseManager Stages (default [prd])
+      --license.client.id string       LicenseManager Client ID (ENV: LICENSE_CLIENT_ID)
+      --license.client.secret string   LicenseManager Client Secret (ENV: LICENSE_CLIENT_SECRET)
       --license.endpoint string        LicenseManager Endpoint (default "license.arango.ai")
       --license.interval duration      Interval of the license synchronization
       --telemetry                      Enables Telemetry (default true)
@@ -187,9 +189,8 @@ Flags:
       --deployment.id string           Deployment ID
   -h, --help                           help for generate
       --inventory string               Path to the Inventory File
-      --license.client.id string       LicenseManager Client ID
-      --license.client.secret string   LicenseManager Client Secret
-      --license.client.stage strings   LicenseManager Stages (default [prd])
+      --license.client.id string       LicenseManager Client ID (ENV: LICENSE_CLIENT_ID)
+      --license.client.secret string   LicenseManager Client Secret (ENV: LICENSE_CLIENT_SECRET)
       --license.endpoint string        LicenseManager Endpoint (default "license.arango.ai")
 
 Global Flags:
@@ -209,9 +210,8 @@ Usage:
 
 Flags:
   -h, --help                           help for secret
-      --license.client.id string       LicenseManager Client ID
-      --license.client.secret string   LicenseManager Client Secret
-      --license.client.stage strings   LicenseManager Stages (default [prd])
+      --license.client.id string       LicenseManager Client ID (ENV: LICENSE_CLIENT_ID)
+      --license.client.secret string   LicenseManager Client Secret (ENV: LICENSE_CLIENT_SECRET)
       --license.endpoint string        LicenseManager Endpoint (default "license.arango.ai")
       --secret string                  Kubernetes Secret Name
 

pkg/platform/chart_manager.go

@@ -121,13 +121,6 @@ var (
 		},
 	}
 
-	flagPlatformEndpoint = cli.Flag[string]{
-		Name:        "platform.endpoint",
-		Description: "Platform Repository URL",
-		Default:     "https://arangodb-platform-prd-chart-registry.s3.amazonaws.com",
-		Persistent:  true,
-	}
-
 	flagUpgradeVersions = cli.Flag[bool]{
 		Name:        "upgrade",
 		Short:       "u",
@@ -176,26 +169,7 @@ var (
 		Default:     true,
 	}
 
-	flagRegistryUseCredentials = cli.Flag[bool]{
-		Name:        "registry.docker.credentials",
-		Description: "Use Docker Credentials",
-		Default:     false,
-		Check: func(in bool) error {
-			return nil
-		},
-	}
-
-	flagRegistryInsecure = cli.Flag[[]string]{
-		Name:        "registry.docker.insecure",
-		Description: "List of insecure registries",
-		Default:     nil,
-	}
-
-	flagRegistryList = cli.Flag[[]string]{
-		Name:        "registry.docker.endpoint",
-		Description: "List of boosted registries",
-		Default:     nil,
-	}
+	flagRegistry = cli.NewRegistry()
 
 	flagActivateInterval = cli.Flag[time.Duration]{
 		Name:        "license.interval",

pkg/platform/flags.go

@@ -44,7 +44,7 @@ import (
 	"github.com/arangodb/kube-arangodb/pkg/util/k8sutil/helm"
 )
 
-func Export(ctx context.Context, path string, m helm.ChartManager, client *regclient.RegClient, p helm.Package, images ...ProtoImage) error {
+func Export(ctx context.Context, endpoint, path string, client *regclient.RegClient, p helm.Package, images ...ProtoImage) error {
 	out, err := os.Create(path)
 	if err != nil {
 		return err
@@ -53,9 +53,9 @@ func Export(ctx context.Context, path string, m helm.ChartManager, client *regcl
 	tw := zip.NewWriter(out)
 
 	var r = exportPackageSet{
-		m:         m,
 		images:    images,
 		client:    client,
+		endpoint:  endpoint,
 		wr:        tw,
 		existence: map[string]bool{},
 	}
@@ -82,9 +82,10 @@ func Export(ctx context.Context, path string, m helm.ChartManager, client *regcl
 type exportPackageSet struct {
 	lock sync.Mutex
 
+	endpoint string
+
 	proto Proto
 
-	m      helm.ChartManager
 	client *regclient.RegClient
 
 	images []ProtoImage
@@ -120,22 +121,17 @@ func (r *exportPackageSet) exportPackage(name string, spec helm.PackageSpec) exe
 		var chart helm.Chart
 
 		if spec.Chart.IsZero() {
-			repo, ok := r.m.Get(name)
-			if !ok {
-				return errors.Errorf("Chart `%s` not found", name)
-			}
-
-			ver, ok := repo.Get(spec.Version)
-			if !ok {
-				return errors.Errorf("Chart `%s=%s` not found", name, spec.Version)
+			ref, err := ChartReference(r.endpoint, spec.GetStage(), name, spec.Version)
+			if err != nil {
+				return err
 			}
 
-			c, err := ver.Get(ctx)
+			loadedChart, err := ExportChart(ctx, r.client, ref)
 			if err != nil {
 				return err
 			}
 
-			chart = c
+			chart = loadedChart
 		} else {
 			chart = helm.Chart(spec.Chart)
 		}

pkg/platform/pack/export.go

@@ -0,0 +1,82 @@
+//
+// DISCLAIMER
+//
+// Copyright 2025 ArangoDB GmbH, Cologne, Germany
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+// Copyright holder is ArangoDB GmbH, Cologne, Germany
+//
+
+package pack
+
+import (
+	"context"
+	"fmt"
+	"io"
+
+	"github.com/regclient/regclient"
+	"github.com/regclient/regclient/types/mediatype"
+	"github.com/regclient/regclient/types/ref"
+
+	"github.com/arangodb/kube-arangodb/pkg/util/errors"
+	"github.com/arangodb/kube-arangodb/pkg/util/k8sutil/helm"
+)
+
+func ChartReference(endpoint, stage, name, version string) (ref.Ref, error) {
+	if stage == "prd" {
+		endpoint = fmt.Sprintf("helm.%s", endpoint)
+	} else {
+		endpoint = fmt.Sprintf("%s.helm.%s", stage, endpoint)
+	}
+
+	return ref.New(fmt.Sprintf("%s/%s:%s", endpoint, name, version))
+}
+
+func ExportChart(ctx context.Context, client *regclient.RegClient, src ref.Ref) (helm.Chart, error) {
+	m, err := client.ManifestGet(ctx, src)
+	if err != nil {
+		return nil, err
+	}
+
+	if m.GetMediaType() != mediatype.OCI1Manifest {
+		return nil, errors.Errorf("Manifest is not %s, got %s", mediatype.OCI1Manifest, m.GetMediaType())
+	}
+
+	layers, err := m.GetLayers()
+	if err != nil {
+		return nil, err
+	}
+
+	if len(layers) != 1 {
+		return nil, errors.Errorf("Expected one layer in the OCI")
+	}
+
+	layer := layers[0]
+
+	if layer.MediaType != "application/vnd.cncf.helm.chart.content.v1.tar+gzip" {
+		return nil, errors.Errorf("Manifest is not %s, got %s", "application/vnd.cncf.helm.chart.content.v1.tar+gzip", layer.MediaType)
+	}
+
+	o, err := client.BlobGet(ctx, src, layer)
+	if err != nil {
+		return nil, err
+	}
+
+	data, err := io.ReadAll(o)
+	if err != nil {
+		return nil, err
+	}
+
+	return data, nil
+}

pkg/platform/pack/utils.go

@@ -42,7 +42,6 @@ func pkg() (*cobra.Command, error) {
 		packageExport,
 		packageImport,
 		packageMerge,
-		packageRegistry,
 	); err != nil {
 		return nil, err
 	}

pkg/platform/package.go

@@ -34,7 +34,7 @@ func packageExport() (*cobra.Command, error) {
 	cmd.Use = "export [flags] package output"
 	cmd.Short = "Export the package in the ZIP Format"
 
-	if err := cli.RegisterFlags(&cmd, flagPlatformEndpoint, flagRegistryUseCredentials, flagRegistryInsecure, flagRegistryList); err != nil {
+	if err := cli.RegisterFlags(&cmd, flagLicenseManager, flagRegistry); err != nil {
 		return nil, err
 	}
 
@@ -56,15 +56,15 @@ func packageExportRun(cmd *cobra.Command, args []string) error {
 
 	out := args[1]
 
-	cm, err := getChartManager(cmd)
+	rc, err := flagRegistry.Client(cmd, flagLicenseManager)
 	if err != nil {
 		return err
 	}
 
-	rc, err := getRegClient(cmd)
+	endpoint, err := flagLicenseManager.Endpoint(cmd)
 	if err != nil {
 		return err
 	}
 
-	return pack.Export(cmd.Context(), out, cm, rc, pkg)
+	return pack.Export(cmd.Context(), endpoint, out, rc, pkg)
 }

pkg/platform/package_export.go

@@ -37,7 +37,7 @@ func packageImport() (*cobra.Command, error) {
 	cmd.Use = "import [flags] registry package output"
 	cmd.Short = "Imports the package from the ZIP format"
 
-	if err := cli.RegisterFlags(&cmd, flagRegistryUseCredentials, flagRegistryInsecure, flagRegistryList); err != nil {
+	if err := cli.RegisterFlags(&cmd, flagRegistry); err != nil {
 		return nil, err
 	}
 
@@ -55,7 +55,7 @@ func packageImportRun(cmd *cobra.Command, args []string) error {
 	dest := args[1]
 	out := args[2]
 
-	rc, err := getRegClient(cmd)
+	rc, err := flagRegistry.Client(cmd, nil)
 	if err != nil {
 		return err
 	}