workspace-image-variants

Operations of the Container Registry API. Paths are relative to your deployment's API host.

GET /api/container-registry-api/workspace-image-variants

List the caller org's workspace image variants

Scoped to the caller org (the X-Xema-Org-Id request context) — there is no orgId parameter and no cross-org listing. Optionally filter by status. Capability: workspace:image.use@1.

Authentication: bearer token (Authorization: Bearer <token>)

POST /api/container-registry-api/workspace-image-variants

Create a workspace image variant (capability: workspace:image.bake@1)

Creates a draft row, computes the content hash, and asynchronously dispatches a Kaniko bake. Idempotent on (orgId, slug, contentHash) — re-creating an existing ready variant is a no-op.

Authentication: bearer token (Authorization: Bearer <token>)

Request body: application/json CreateWorkspaceImageVariantDto

GET /api/container-registry-api/workspace-image-variants/by-org-default/{orgId}

Resolve the org's default variant for a runtime kind

Returns the org-default variant for the given runtimeKind, or null when the org has none configured. This surface reports NO fallback image: the immutable worker image coordinate is pinned solely by the orchestrator's own RUNTIME_IMAGE_DIGEST_MATRIX.

Authentication: bearer token (Authorization: Bearer <token>)

GET /api/container-registry-api/workspace-image-variants/by-org/{orgId}/by-slug/{slug}

Resolve an org's explicitly named workspace image variant

Service-only exact lookup used by workspace allocation. Returns null when the org has no variant with the requested slug.

Authentication: bearer token (Authorization: Bearer <token>)

GET /api/container-registry-api/workspace-image-variants/{id}

Describe a single variant

Authentication: bearer token (Authorization: Bearer <token>)

PUT /api/container-registry-api/workspace-image-variants/{id}

Update mutable fields on a variant (capability: workspace:image.bake@1)

Authentication: bearer token (Authorization: Bearer <token>)

Request body: application/json UpdateWorkspaceImageVariantDto

DELETE /api/container-registry-api/workspace-image-variants/{id}

Archive a variant (capability: workspace:image.publish@1)

Sets status=archived. Archived variants are excluded from selection but kept for lineage.

Authentication: bearer token (Authorization: Bearer <token>)

POST /api/container-registry-api/workspace-image-variants/{id}/rebake

Force-rebuild a variant (capability: workspace:image.bake@1)

Transitions the row to status=building and re-dispatches the Kaniko bake. Use after a transient bake failure or to pick up a manually updated base image.

Authentication: bearer token (Authorization: Bearer <token>)