Label image references with original image

[c-pius]

‼️ Only do after #316 (comment) is done

Description

Image used by the module are already included in the resources of the component version, e.g. /kyma/kyma-modules/blob/30da84fbf43da2f16ad47ffcde887a1211e0a965/telemetry/moduletemplate-telemetry-1.57.2.yaml#L76-L86

Extend the labels of these image resources with an additional label preserving the original image reference. Define a proper name for this label.

Reasons

Runtime Bootstrapper requires an explicit mapping of images to replace. As the imageReference is localized after transfer, the info about the original image ref is gone. To still have this information accessible, we have to add this info to the metadata of the component version.

AC

• .descriptor.component.resources[].labels includes a label preserving the original image
• at initial creation: .descriptor.component.resources[].labels[<name of the new label>].value == .descriptor.component.resources[].access.imageReference
  • after transfer, the values differ

DEV Notes

• this is where we already add the sec-scanning label:

  modulectl/internal/service/componentdescriptor/resources/ociartifactresource.go

  Lines 30 to 37 in 6aa3ba5

  	var labels []ocmv1.Label
  	if securityScanEnabled {
  	typeLabel, err := createLabel()
  	if err != nil {
  	return nil, err
  	}
  	labels = []ocmv1.Label{*typeLabel}
  	}

• labels can be considered for the signing, but clarified with SREs that our CVs are anyway not signed, so no need to include it. https://github.com/open-component-model/ocm-spec/blob/main/doc/01-model/07-extensions.md#labels

[c-pius]

Blocked until we get the go for implementation.

[c-pius]

It was decided that rt-bootstrapper config is not changed for now. The question is if we should still do this pro-actively so that we have original images in case we need them in the future. I guess we can decide how we think it is best.

[medmes]

#316 has been completed (PR #408). This issue can now be started.

Note: The dev notes reference to ociartifactresource.go is no longer valid — that file was removed as part of #316. The equivalent place to add the original image label is now in internal/common/types/component/constructor.go in the AddImageAsResource method, where the sec-scanning label is already added.