Loading…
Timezone
In-person + Virtual
October 24-28
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon North America 2022 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Eastern Daylight Time (UTC -4). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change.
Back To Schedule
Thursday, October 27 • 5:25pm - 6:00pm
It’s Complicated: Relationships Between Objects In OCI Registries - Josh Dolitsky, Chainguard & Sajay Antony, Microsoft

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share
Feedback form is now closed.


The limitations of the current OCI spec are causing people to come up with all sorts of wild hacks to connect objects in a registry. For example, tools like cosign push image signatures to the registry using a long, cryptic tag suffixed with “.sig”. There must be a better way! To solve this issue, all of the major registries have come together to form the OCI Reference Types Working Group. This group has been tasked with determining how to describe and query relationships between objects stored in an OCI registry. This means potential changes to the registry HTTP API (distribution-spec) and/or associated JSON schema (image-spec). Josh and Sajay will describe the ways in which the OCI plans to address these topics with backwards compatibility in mind. Beyond the technical details, hear about various challenges and techniques used within the working group to successfully bring people together to agree on changes to a critical spec that hasn’t been modified for years.
Speakers
JD

Josh Dolitsky

Software Engineer, Chainguard
Josh is an engineer at Chainguard, doing his part to help secure the software supply chain. He is a maintainer on various open source projects and initiatives relating to container and artifact distribution, including the OCI Distribution Spec. When away from the computer, he spends... Read More →
avatar for Sajay Antony

Sajay Antony

Principal Group Engineering Manager, Microsoft
Sajay is an Engineering Manager in Azure working on services like Azure Container registry. He is also maintainer on the ORAS project and contributor on other projects like Notary and the OCI working group.

Thursday October 27, 2022 5:25pm - 6:00pm EDT
430 AB
  Open Interfaces + Interoperability