fermyon/spin

Old OCI artifacts with `allowed_http_hosts` fail

lann opened this issue · 1 comments

lann commented

The manifest v1->v2 compat code converts allowed_http_hosts to allowed_outbound_hosts, but there are evidently OCI artifacts "out there" with allowed_http_hosts in their locked app JSON.

lann commented

Presumably we would need to apply the equivalent of

spin/crates/manifest/src/compat.rs

Line 100 in 6f010fa

pub(crate) fn convert_allowed_http_to_allowed_hosts(
to locked apps after parsing.