[registry] Disable token refresh thread when prefetch is enabled

Add a new RegistryConfig field called `disable_token_refresh` that will decide whether the registry refresh token thread is started or not.
It will be set to false by default but will be enabled when prefetch is enabled. The refresh thread is disabled in this case because it becomes useless once everything has been prefetched and it's unlikely that tokens would expire during the time it takes for the prefetch to run (as it would mean that regular image pulls  would be likely to fail as well because they download the layers in a similar time to the prefetch)

Signed-off-by: Baptiste Girard-Carrabin <baptiste.girardcarrabin@datadoghq.com>

Author: Fricounet

api/src/config.rs

@@ -626,6 +626,9 @@ pub struct RegistryConfig {
     /// Enable HTTP proxy for the read request.
     #[serde(default)]
     pub proxy: ProxyConfig,
+    /// Disable background token refresh thread. Defaults to false.
+    #[serde(skip_deserializing)]
+    pub disable_token_refresh: bool,
 }
 
 /// Configuration information for blob cache manager.
@@ -1364,7 +1367,7 @@ impl TryFrom<RafsConfig> for ConfigV2 {
     type Error = std::io::Error;
 
     fn try_from(v: RafsConfig) -> std::result::Result<Self, Self::Error> {
-        let backend: BackendConfigV2 = (&v.device.backend).try_into()?;
+        let mut backend: BackendConfigV2 = (&v.device.backend).try_into()?;
         let mut cache: CacheConfigV2 = (&v.device.cache).try_into()?;
         let rafs = RafsConfigV2 {
             mode: v.mode,
@@ -1380,6 +1383,13 @@ impl TryFrom<RafsConfig> for ConfigV2 {
             cache.prefetch = rafs.prefetch.clone();
         }
 
+        // If prefetch is enabled, disable token refresh by default
+        if cache.prefetch.enable {
+            if let Some(registry) = backend.registry.as_mut() {
+                registry.disable_token_refresh = true;
+            }
+        }
+
         Ok(ConfigV2 {
             version: 2,
             id: v.device.id,
@@ -1509,10 +1519,19 @@ impl TryFrom<&BlobCacheEntryConfig> for BlobCacheEntryConfigV2 {
             cache_validate: false,
             prefetch_config: v.prefetch_config.clone(),
         };
+        let mut backend: BackendConfigV2 = (&backend_config).try_into()?;
+
+        // If prefetch is enabled, disable token refresh by default
+        if cache_config.prefetch_config.enable {
+            if let Some(registry) = backend.registry.as_mut() {
+                registry.disable_token_refresh = true;
+            }
+        }
+
         Ok(BlobCacheEntryConfigV2 {
             version: 2,
             id: v.id.clone(),
-            backend: (&backend_config).try_into()?,
+            backend,
             external_backends: v.external_backends.clone(),
             cache: (&cache_config).try_into()?,
             metadata_path: v.metadata_path.clone(),
@@ -2099,6 +2118,15 @@ mod tests {
         "#;
         let config = ConfigV2::from_str(content).unwrap();
         assert_eq!(&config.id, "");
+        // token refresh should be disabled when prefetch is enabled
+        assert!(
+            config
+                .get_backend_config()
+                .unwrap()
+                .get_registry_config()
+                .unwrap()
+                .disable_token_refresh
+        );
     }
 
     #[test]

storage/src/backend/registry.rs

@@ -883,8 +883,12 @@ impl Registry {
             first: First::new(),
         };
 
-        registry.start_refresh_token_thread();
-        info!("Refresh token thread started.");
+        if config.disable_token_refresh {
+            info!("Refresh token thread is disabled.");
+        } else {
+            registry.start_refresh_token_thread();
+            info!("Refresh token thread started.");
+        }
 
         Ok(registry)
     }