cloudconsolelink 4.0.0__tar.gz → 4.1.1__tar.gz

{cloudconsolelink-4.0.0/cloudconsolelink.egg-info → cloudconsolelink-4.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cloudconsolelink
-Version: 4.0.0
+Version: 4.1.1
 Summary: Generate console links for cloud resources
 Home-page: https://github.com/Cloudanix/cloud-console-links
 Maintainer: Cloudanix
@@ -14,7 +14,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Provides-Extra: dev
 Requires-Dist: pre-commit~=4.2; extra == "dev"
-Requires-Dist: pytest~=8.3; extra == "dev"
+Requires-Dist: pytest>=9.0.3; extra == "dev"
 Requires-Dist: pytest-cov==2.11; extra == "dev"
 Requires-Dist: pytest-mock~=3.14; extra == "dev"
 Requires-Dist: types-PyYAML~=6.0; extra == "dev"
@@ -65,6 +65,9 @@ make check
 #### For GCP
 ```from cloudconsolelink.clouds.gcp import GCPLinker```
 
+#### For container images (ECR, GAR/GCR, ACR, Docker Hub, OCIR)
+```from cloudconsolelink.clouds.registry import image_console_link```
+
 #### To get console link
 call method ```get_console_link()```
 
@@ -119,7 +122,26 @@ resource_name = "storage_bucket"
 console_link = gcp.get_console_link(bucket_name=bucket_name, resource_name=resource_name)
   ```
 
-## get_console_link() parameters discription:
+#### Container image (ECR, GAR/GCR, ACR, Docker Hub, OCIR):
+```python
+from cloudconsolelink.clouds.registry import image_console_link
+
+# Provider is detected from the registry hostname of the image reference.
+console_link = image_console_link(
+    "602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon-k8s-cni-init"
+)
+
+# Azure Container Registry needs subscription/resource-group hints for a deep
+# link (they are not present in the image reference); without them it degrades
+# to a registry browse link.
+console_link = image_console_link(
+    "myregistry.azurecr.io/app",
+    subscription_id="5592e8dc-...",
+    resource_group="my-rg",
+)
+```
+
+## get_console_link() parameters description:
 
 ### AWS:
   1) arn: arn of resource

{cloudconsolelink-4.0.0 → cloudconsolelink-4.1.1}/README.md

@@ -33,6 +33,9 @@ make check
 #### For GCP
 ```from cloudconsolelink.clouds.gcp import GCPLinker```
 
+#### For container images (ECR, GAR/GCR, ACR, Docker Hub, OCIR)
+```from cloudconsolelink.clouds.registry import image_console_link```
+
 #### To get console link
 call method ```get_console_link()```
 
@@ -87,7 +90,26 @@ resource_name = "storage_bucket"
 console_link = gcp.get_console_link(bucket_name=bucket_name, resource_name=resource_name)
   ```
 
-## get_console_link() parameters discription:
+#### Container image (ECR, GAR/GCR, ACR, Docker Hub, OCIR):
+```python
+from cloudconsolelink.clouds.registry import image_console_link
+
+# Provider is detected from the registry hostname of the image reference.
+console_link = image_console_link(
+    "602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon-k8s-cni-init"
+)
+
+# Azure Container Registry needs subscription/resource-group hints for a deep
+# link (they are not present in the image reference); without them it degrades
+# to a registry browse link.
+console_link = image_console_link(
+    "myregistry.azurecr.io/app",
+    subscription_id="5592e8dc-...",
+    resource_group="my-rg",
+)
+```
+
+## get_console_link() parameters description:
 
 ### AWS:
   1) arn: arn of resource

{cloudconsolelink-4.0.0 → cloudconsolelink-4.1.1}/cloudconsolelink/__init__.py

@@ -1,2 +1,2 @@
 # version of the module
-__version__ = "4.0.0"
+__version__ = "4.0.1"

{cloudconsolelink-4.0.0 → cloudconsolelink-4.1.1}/cloudconsolelink/clouds/aws/links.py

@@ -6,6 +6,7 @@ from typing import Dict
 # https://{region}.console.aws.amazon.com/{service}/home?region={region}.
 HOME_URLS: Dict[str, str] = {
     "elasticloadbalancing": 'https://{data.get("region", "")}.{data.get("console", "")}/ec2/home?region={data.get("region", "")}#LoadBalancers:',
+    "network-firewall": 'https://{data.get("region", "")}.{data.get("console", "")}/vpc/home?region={data.get("region", "")}#Firewalls:',
     "logs": 'https://{data.get("region", "")}.{data.get("console", "")}/cloudwatch/home?region={data.get("region", "")}#logsV2:log-groups',
     "sns": 'https://{data.get("region", "")}.{data.get("console", "")}/sns/v3/home?region={data.get("region", "")}',
     "sqs": 'https://{data.get("region", "")}.{data.get("console", "")}/sqs/v2/home?region={data.get("region", "")}',
@@ -407,10 +408,10 @@ def get_links() -> Dict:
                             home?region=u{data.get("region", "")}#LoadBalancers:search={data.get("resource", "")};sort=loadBalancerName',
         },
         "ecr": {  # Amazon Elastic Container Registry
-            "repository": 'https://{data.get("region", "")}.{data.get("console", "")}/ecr/repositories/{data.get\
-                ("resource", "")}?region={data.get("region", "")}',
-            "image": 'https://{data.get("region", "")}.{data.get("console", "")}/ecr/repositories/{data.get\
-                ("resource", "")}?region={data.get("region", "")}',
+            "repository": 'https://{data.get("region", "")}.{data.get("console", "")}/ecr/repositories/private/\
+                {data.get("account", "")}/{data.get("resource", "")}?region={data.get("region", "")}',
+            "image": 'https://{data.get("region", "")}.{data.get("console", "")}/ecr/repositories/private/\
+                {data.get("account", "")}/{data.get("resource", "")}?region={data.get("region", "")}',
         },
         "ecs": {  # Amazon Elastic Container Service
             "cluster": 'https://{data.get("region", "")}.{data.get("console", "")}/ecs/home?region={data.get("region", "")}#/clusters/{data.get("resource", "")}',
@@ -828,6 +829,12 @@ def get_links() -> Dict:
         },
         "neptune-db": {  # Amazon Neptune
         },
+        "network-firewall": {  # AWS Network Firewall
+            "firewall": 'https://{data.get("region", "")}.{data.get("console", "")}/vpc/home?region={data.get("region", "")}#FirewallDetails:firewallArn={arn}',
+            "firewall-policy": 'https://{data.get("region", "")}.{data.get("console", "")}/vpc/home?region={data.get("region", "")}#FirewallPolicyDetails:firewallPolicyArn={arn}',
+            "stateful-rulegroup": 'https://{data.get("region", "")}.{data.get("console", "")}/vpc/home?region={data.get("region", "")}#StatefulRuleGroupDetails:ruleGroupArn={arn}',
+            "stateless-rulegroup": 'https://{data.get("region", "")}.{data.get("console", "")}/vpc/home?region={data.get("region", "")}#StatelessRuleGroupDetails:ruleGroupArn={arn}',
+        },
         "networkmanager": {  # Network Manager
             "device": 'https://{data.get("console", "")}/networkmanager/home?region={data.get("region", "")}#/networks/{data.get("resource", "")}/devices',
             "global-network": 'https://{data.get("console", "")}/networkmanager/home?region={data.get("region", "")}#/networks/{data.get("resource", "")}',

cloudconsolelink-4.1.1/cloudconsolelink/clouds/registry/__init__.py

@@ -0,0 +1,230 @@
+"""Container-registry (OCI image) console deep-links.
+
+An image reference (``registry-host/repository[:tag][@digest]``) is a different
+identifier axis than an ARN / resource_name / resource id: the *hostname*
+identifies the provider. This module parses the reference, classifies the host,
+and routes to a console link — delegating to the existing provider linkers where
+a path already exists, and building the URL directly only where none does
+(Docker Hub, ECR Public, GCR, OCIR, ACR, and image/digest drill-in).
+
+See ``docs/oci-images/spec.md``.
+"""
+import re
+from collections import namedtuple
+from urllib.parse import quote
+
+from cloudconsolelink.clouds.aws import AWSLinker, get_console
+from cloudconsolelink.clouds.gcp import GCPLinker
+
+ImageRef = namedtuple("ImageRef", ["host", "repository", "tag", "digest"])
+
+# <account>.dkr.ecr.<region>.amazonaws.com  (optional .cn for the aws-cn partition)
+_ECR_HOST = re.compile(r"^(\d+)\.dkr\.ecr\.([a-z0-9-]+)\.amazonaws\.com(\.cn)?$")
+# <region>.gcr.io legacy hosts (gcr.io, us.gcr.io, eu.gcr.io, asia.gcr.io, ...)
+_GCR_HOST = re.compile(r"^([a-z0-9-]+\.)?gcr\.io$")
+
+_DOCKERHUB_HOSTS = {"", "docker.io", "registry-1.docker.io", "index.docker.io"}
+
+
+def parse_image_ref(ref):
+    """Split an OCI image reference into ``ImageRef(host, repository, tag, digest)``.
+
+    Grammar: ``[registry-host[:port]/]repository[:tag][@digest]``. A first path
+    segment that looks like a hostname (contains ``.`` or ``:``, or is
+    ``localhost``) is treated as the registry host; otherwise the reference is
+    hostless (Docker Hub). ``repository`` keeps all remaining ``/`` segments.
+    """
+    ref = (ref or "").strip()
+    if not ref:
+        raise ValueError("empty image reference")
+
+    digest = ""
+    if "@" in ref:
+        ref, digest = ref.split("@", 1)
+        if not digest:
+            raise ValueError(f"image reference has an empty digest: {ref!r}@")
+
+    first, slash, rest = ref.partition("/")
+    if slash and ("." in first or ":" in first or first == "localhost"):
+        host, path = first, rest
+    else:
+        host, path = "", ref
+
+    tag = ""
+    seg_start = path.rfind("/") + 1
+    colon = path.find(":", seg_start)
+    if colon != -1:
+        tag = path[colon + 1:]
+        path = path[:colon]
+        if not tag:
+            raise ValueError(f"image reference has an empty tag: {path!r}:")
+
+    if not path:
+        raise ValueError(f"image reference has no repository: {ref!r}")
+
+    return ImageRef(host=host, repository=path, tag=tag, digest=digest)
+
+
+def classify(host):
+    """Map a registry hostname to a registry family key.
+
+    Returns one of ``ecr`` | ``ecr-public`` | ``gar`` | ``gcr`` | ``ocir`` |
+    ``acr`` | ``dockerhub``, or ``""`` for an unrecognized host.
+    """
+    if host in _DOCKERHUB_HOSTS:
+        return "dockerhub"
+    if host == "public.ecr.aws":
+        return "ecr-public"
+    if _ECR_HOST.match(host):
+        return "ecr"
+    if host.endswith("-docker.pkg.dev"):
+        return "gar"
+    if _GCR_HOST.match(host):
+        return "gcr"
+    if host.endswith(".ocir.io"):
+        return "ocir"
+    if host.endswith(".azurecr.io"):
+        return "acr"
+    return ""
+
+
+# --- per-family builders ---------------------------------------------------
+# Repo-level links delegate to the existing provider linker (no URL duplicated).
+# Image/tag/digest drill-in URLs are built here because no existing identifier
+# (ARN / resource_name) can carry image coordinates.
+
+
+def _ecr(ref, hints):
+    account, region, cn = _ECR_HOST.match(ref.host).groups()
+    if region.startswith("us-gov-"):
+        partition = "aws-us-gov"
+    elif cn:
+        partition = "aws-cn"
+    else:
+        partition = "aws"
+
+    if ref.digest:
+        # ECR console addresses images by digest — net-new, ARN can't carry it.
+        console = get_console(partition)
+        return (
+            f"https://{region}.{console}/ecr/repositories/private/{account}/"
+            f"{ref.repository}/_/image/{ref.digest}/details?region={region}"
+        )
+
+    # Repo view (tag-only refs land here too — tags are listed on the repo page).
+    arn = f"arn:{partition}:ecr:{region}:{account}:repository/{ref.repository}"
+    return AWSLinker().get_console_link(arn=arn)
+
+
+def _ecr_public(ref, hints):
+    return f"https://gallery.ecr.aws/{ref.repository}"
+
+
+def _gar(ref, hints):
+    location = ref.host[: -len("-docker.pkg.dev")]
+    parts = ref.repository.split("/")
+    if len(parts) < 2:
+        raise ValueError(
+            f"GAR image reference needs <project>/<repository>[/<image>]: {ref.repository!r}"
+        )
+    project, repo = parts[0], parts[1]
+
+    if len(parts) >= 3:
+        image = "/".join(parts[2:])  # net-new: image drill-in below the repo
+        return (
+            f"https://console.cloud.google.com/artifacts/docker/{project}/{location}/"
+            f"{repo}/{image}?project={project}"
+        )
+
+    # project/repo -> repo view via the existing Artifact Registry template.
+    return GCPLinker().get_console_link(
+        resource_name="artifact_registry_repository",
+        project_id=project,
+        region=location,
+        instance_name=repo,
+    )
+
+
+def _gcr(ref, hints):
+    # gcr.io -> GLOBAL, us.gcr.io -> US, eu.gcr.io -> EU, asia.gcr.io -> ASIA
+    prefix = ref.host[: -len(".gcr.io")] if ref.host != "gcr.io" else ""
+    location = prefix.upper() if prefix else "GLOBAL"
+    parts = ref.repository.split("/")
+    project = parts[0]
+    image = "/".join(parts[1:])
+    if not image:
+        return f"https://console.cloud.google.com/gcr/images/{project}?project={project}"
+    return (
+        f"https://console.cloud.google.com/gcr/images/{project}/{location}/"
+        f"{image}?project={project}"
+    )
+
+
+def _dockerhub(ref, hints):
+    parts = ref.repository.split("/")
+    if len(parts) == 1:
+        namespace, repo = "library", parts[0]
+    else:
+        namespace, repo = parts[0], "/".join(parts[1:])
+
+    if namespace == "library":
+        url = f"https://hub.docker.com/_/{repo}"
+    else:
+        url = f"https://hub.docker.com/r/{namespace}/{repo}"
+    if ref.tag:
+        url += f"/tags?name={ref.tag}"
+    return url
+
+
+def _ocir(ref, hints):
+    # OCIR console needs an OCID (absent from the image ref) to reach a repo, so
+    # fall back to the Container Registry landing page. ponytail: no OCID lookup.
+    return "https://cloud.oracle.com/registry/containers/repos"
+
+
+def _acr(ref, hints):
+    name = ref.host[: -len(".azurecr.io")]
+    sub = hints.get("subscription_id")
+    rg = hints.get("resource_group")
+    if sub and rg:
+        arm_id = (
+            f"/subscriptions/{sub}/resourceGroups/{rg}/providers/"
+            f"Microsoft.ContainerRegistry/registries/{name}"
+        )
+        return (
+            "https://portal.azure.com/#view/Microsoft_Azure_ContainerRegistries/"
+            f"RepositoryBlade/registryId/{quote(arm_id, safe='')}/repository/{ref.repository}"
+        )
+    # No subscription/resource-group hints -> registry browse fallback.
+    return (
+        "https://portal.azure.com/#blade/HubsExtension/BrowseResource/"
+        "resourceType/Microsoft.ContainerRegistry%2Fregistries"
+    )
+
+
+_BUILDERS = {
+    "ecr": _ecr,
+    "ecr-public": _ecr_public,
+    "gar": _gar,
+    "gcr": _gcr,
+    "dockerhub": _dockerhub,
+    "ocir": _ocir,
+    "acr": _acr,
+}
+
+
+def image_console_link(image_ref, **hints):
+    """Return a cloud-console deep-link for a container image reference.
+
+    ``hints`` supplies data absent from the reference itself — currently
+    ``subscription_id`` and ``resource_group`` for Azure Container Registry.
+    An unrecognized registry host falls back to a Docker Hub search.
+    """
+    ref = parse_image_ref(image_ref)
+    builder = _BUILDERS.get(classify(ref.host))
+    if builder is None:
+        return f"https://hub.docker.com/search?q={quote(ref.repository)}"
+    return builder(ref, hints)
+
+
+__all__ = ["ImageRef", "parse_image_ref", "classify", "image_console_link"]

{cloudconsolelink-4.0.0 → cloudconsolelink-4.1.1/cloudconsolelink.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cloudconsolelink
-Version: 4.0.0
+Version: 4.1.1
 Summary: Generate console links for cloud resources
 Home-page: https://github.com/Cloudanix/cloud-console-links
 Maintainer: Cloudanix
@@ -14,7 +14,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Provides-Extra: dev
 Requires-Dist: pre-commit~=4.2; extra == "dev"
-Requires-Dist: pytest~=8.3; extra == "dev"
+Requires-Dist: pytest>=9.0.3; extra == "dev"
 Requires-Dist: pytest-cov==2.11; extra == "dev"
 Requires-Dist: pytest-mock~=3.14; extra == "dev"
 Requires-Dist: types-PyYAML~=6.0; extra == "dev"
@@ -65,6 +65,9 @@ make check
 #### For GCP
 ```from cloudconsolelink.clouds.gcp import GCPLinker```
 
+#### For container images (ECR, GAR/GCR, ACR, Docker Hub, OCIR)
+```from cloudconsolelink.clouds.registry import image_console_link```
+
 #### To get console link
 call method ```get_console_link()```
 
@@ -119,7 +122,26 @@ resource_name = "storage_bucket"
 console_link = gcp.get_console_link(bucket_name=bucket_name, resource_name=resource_name)
   ```
 
-## get_console_link() parameters discription:
+#### Container image (ECR, GAR/GCR, ACR, Docker Hub, OCIR):
+```python
+from cloudconsolelink.clouds.registry import image_console_link
+
+# Provider is detected from the registry hostname of the image reference.
+console_link = image_console_link(
+    "602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon-k8s-cni-init"
+)
+
+# Azure Container Registry needs subscription/resource-group hints for a deep
+# link (they are not present in the image reference); without them it degrades
+# to a registry browse link.
+console_link = image_console_link(
+    "myregistry.azurecr.io/app",
+    subscription_id="5592e8dc-...",
+    resource_group="my-rg",
+)
+```
+
+## get_console_link() parameters description:
 
 ### AWS:
   1) arn: arn of resource

{cloudconsolelink-4.0.0 → cloudconsolelink-4.1.1}/cloudconsolelink.egg-info/SOURCES.txt

@@ -20,9 +20,12 @@ cloudconsolelink/clouds/gcp/__init__.py
 cloudconsolelink/clouds/gcp/links.py
 cloudconsolelink/clouds/oci/__init__.py
 cloudconsolelink/clouds/oci/links.py
+cloudconsolelink/clouds/registry/__init__.py
 tests/test_aws.py
 tests/test_azure.py
 tests/test_gcp.py
 tests/test_oci.py
 tests/test_packaging.py
-tests/test_provider_coverage.py
+tests/test_provider_coverage.py
+tests/test_registry_link.py
+tests/test_registry_parse.py

{cloudconsolelink-4.0.0 → cloudconsolelink-4.1.1}/cloudconsolelink.egg-info/requires.txt

@@ -1,7 +1,7 @@
 
 [dev]
 pre-commit~=4.2
-pytest~=8.3
+pytest>=9.0.3
 pytest-cov==2.11
 pytest-mock~=3.14
 types-PyYAML~=6.0

{cloudconsolelink-4.0.0 → cloudconsolelink-4.1.1}/requirements-dev.txt

@@ -1,5 +1,5 @@
 pre-commit~=4.2
-pytest~=8.3
+pytest>=9.0.3
 pytest-cov==2.11
 pytest-mock~=3.14
 

{cloudconsolelink-4.0.0 → cloudconsolelink-4.1.1}/setup.py

@@ -1,3 +1,4 @@
+import subprocess
 from pathlib import Path
 
 import setuptools
@@ -24,8 +25,23 @@ def read_requirements(path: str) -> list[str]:
     return lines
 
 
+def git_version(fallback: str) -> str:
+    # ponytail: build-time version from the current git tag; falls back to
+    # __init__.py when git/tags are absent (e.g. building from an sdist tarball).
+    try:
+        tag = subprocess.check_output(
+            ["git", "describe", "--tags", "--abbrev=0"],
+            cwd=ROOT,
+            stderr=subprocess.DEVNULL,
+        )
+    except (subprocess.CalledProcessError, FileNotFoundError):
+        return fallback
+    return tag.decode().strip().lstrip("v") or fallback
+
+
 package_info: dict[str, object] = {}
 exec(read_text("cloudconsolelink/__init__.py"), package_info)
+version = git_version(str(package_info["__version__"]))
 long_description = read_text("README.md")
 install_requires = read_requirements("requirements.txt")
 dev_requirements = read_requirements("requirements-dev.txt")
@@ -35,7 +51,7 @@ setuptools.setup(
     # Here is the module name.
     name="cloudconsolelink",
     # version of the module
-    version=str(package_info["__version__"]),
+    version=version,
     # Name of Maintainer
     maintainer="Cloudanix",
     # Maintainer Email address

{cloudconsolelink-4.0.0 → cloudconsolelink-4.1.1}/tests/test_aws.py

@@ -6,6 +6,7 @@ from cloudconsolelink.clouds.aws import InvalidARNError
 from cloudconsolelink.clouds.aws import InvalidPartitionError
 from cloudconsolelink.clouds.aws import InvalidServiceError
 from cloudconsolelink.clouds.aws import get_service_home_link
+from cloudconsolelink.clouds.aws import _render
 from cloudconsolelink.clouds.aws.links import get_links
 
 aws = AWSLinker()
@@ -23,7 +24,7 @@ def test_aws_ec2_instance():
 
 def test_aws_ecr_repository():
     arn = "arn:aws:ecr:us-east1:1234567890:repository/repo1"
-    expected_link = "https://us-east1.console.aws.amazon.com/ecr/repositories/repo1\
+    expected_link = "https://us-east1.console.aws.amazon.com/ecr/repositories/private/1234567890/repo1\
         ?region=us-east1"
 
     out_link = aws.get_console_link(arn=arn)
@@ -283,3 +284,60 @@ def test_aws_ec2_key_pair_trailing_colon_falls_back_to_key_pair_page():
     out_link = aws.get_console_link(arn=arn)
     assert out_link == "https://us-east-1.console.aws.amazon.com/ec2/v2/home?region=us-east-1#KeyPairs:"
 
+
+def test_aws_network_firewall_firewall():
+    arn = "arn:aws:network-firewall:us-east-1:123456789012:firewall/my-firewall"
+    out_link = aws.get_console_link(arn=arn)
+    assert out_link == (
+        "https://us-east-1.console.aws.amazon.com/vpc/home"
+        "?region=us-east-1"
+        "#FirewallDetails:firewallArn=arn:aws:network-firewall:us-east-1:123456789012:firewall/my-firewall"
+    )
+
+
+def test_aws_network_firewall_policy():
+    arn = "arn:aws:network-firewall:us-east-1:123456789012:firewall-policy/my-policy"
+    out_link = aws.get_console_link(arn=arn)
+    assert out_link == (
+        "https://us-east-1.console.aws.amazon.com/vpc/home"
+        "?region=us-east-1"
+        "#FirewallPolicyDetails:firewallPolicyArn=arn:aws:network-firewall:us-east-1:123456789012:firewall-policy/my-policy"
+    )
+
+
+def test_aws_network_firewall_stateful_rulegroup():
+    arn = "arn:aws:network-firewall:us-east-1:123456789012:stateful-rulegroup/my-rules"
+    out_link = aws.get_console_link(arn=arn)
+    assert out_link == (
+        "https://us-east-1.console.aws.amazon.com/vpc/home"
+        "?region=us-east-1"
+        "#StatefulRuleGroupDetails:ruleGroupArn=arn:aws:network-firewall:us-east-1:123456789012:stateful-rulegroup/my-rules"
+    )
+
+
+def test_aws_network_firewall_stateless_rulegroup():
+    arn = "arn:aws:network-firewall:us-east-1:123456789012:stateless-rulegroup/my-rules"
+    out_link = aws.get_console_link(arn=arn)
+    assert out_link == (
+        "https://us-east-1.console.aws.amazon.com/vpc/home"
+        "?region=us-east-1"
+        "#StatelessRuleGroupDetails:ruleGroupArn=arn:aws:network-firewall:us-east-1:123456789012:stateless-rulegroup/my-rules"
+    )
+
+
+def test_aws_network_firewall_home():
+    arn = "arn:aws:network-firewall:us-east-1:123456789012"
+    out_link = aws.get_console_link(arn=arn)
+    assert out_link == "https://us-east-1.console.aws.amazon.com/vpc/home?region=us-east-1#Firewalls:"
+
+
+def test_aws_render_unknown_template_expression_returns_empty_string():
+    result = _render("{unknown_expr}", {"region": "us-east-1", "console": "console.aws.amazon.com"})
+    assert result == ""
+
+
+def test_aws_network_firewall_unknown_resource_falls_back_to_home():
+    arn = "arn:aws:network-firewall:us-east-1:123456789012:unknown-type/res-1"
+    out_link = aws.get_console_link(arn=arn)
+    assert out_link == "https://us-east-1.console.aws.amazon.com/vpc/home?region=us-east-1#Firewalls:"
+

{cloudconsolelink-4.0.0 → cloudconsolelink-4.1.1}/tests/test_provider_coverage.py

@@ -363,3 +363,41 @@ def test_oci_linker_supports_all_resource_builders(method_name: str):
 def test_oci_linker_rejects_unknown_resource_name():
     with pytest.raises(ValueError, match="Invalid parameters provided"):
         OCILinker().get_console_link(resource_name="missing_resource", region="us-ashburn-1")
+
+
+# ---------------------------------------------------------------------------
+# Container-registry (OCI image) coverage
+# ---------------------------------------------------------------------------
+
+from cloudconsolelink.clouds.registry import _BUILDERS, classify, image_console_link
+
+# One representative image ref per registry family, exercising every builder.
+REGISTRY_SAMPLE_REFS = {
+    "ecr": "123456789012.dkr.ecr.us-east-1.amazonaws.com/repo",
+    "ecr-public": "public.ecr.aws/alias/repo",
+    "gar": "us-docker.pkg.dev/proj/repo/img",
+    "gcr": "gcr.io/proj/img",
+    "dockerhub": "docker.io/library/nginx",
+    "ocir": "iad.ocir.io/tenancy/repo",
+    "acr": "myreg.azurecr.io/app",
+}
+
+
+def test_every_builder_has_a_sample_ref():
+    # A new registry family must be wired into classify() *and* covered here.
+    assert set(_BUILDERS) == set(REGISTRY_SAMPLE_REFS)
+
+
+@pytest.mark.parametrize("family", sorted(_BUILDERS))
+def test_registry_family_is_reachable(family: str):
+    ref = REGISTRY_SAMPLE_REFS[family]
+    # The sample ref classifies to the family it stands for...
+    assert classify(classify_host(ref)) == family
+    # ...and routing it yields an https console link.
+    assert image_console_link(ref).startswith("https://")
+
+
+def classify_host(ref: str) -> str:
+    from cloudconsolelink.clouds.registry import parse_image_ref
+
+    return parse_image_ref(ref).host

cloudconsolelink-4.1.1/tests/test_registry_link.py

@@ -0,0 +1,116 @@
+from urllib.parse import quote
+
+import pytest
+
+from cloudconsolelink.clouds.registry import image_console_link
+
+
+@pytest.mark.parametrize(
+    "ref, expected",
+    [
+        # --- ECR private (delegates to AWSLinker via a reconstructed ARN) ---
+        (
+            "602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon-k8s-cni-init",
+            "https://us-east-2.console.aws.amazon.com/ecr/repositories/private/"
+            "602401143452/amazon-k8s-cni-init?region=us-east-2",
+        ),
+        # digest drill-in (built directly, ARN cannot carry a digest)
+        (
+            "602401143452.dkr.ecr.us-east-2.amazonaws.com/repo@sha256:abc123",
+            "https://us-east-2.console.aws.amazon.com/ecr/repositories/private/"
+            "602401143452/repo/_/image/sha256:abc123/details?region=us-east-2",
+        ),
+        # tag-only lands on the repo view
+        (
+            "602401143452.dkr.ecr.us-east-2.amazonaws.com/repo:v1",
+            "https://us-east-2.console.aws.amazon.com/ecr/repositories/private/"
+            "602401143452/repo?region=us-east-2",
+        ),
+        # China partition
+        (
+            "123456789012.dkr.ecr.cn-north-1.amazonaws.com.cn/repo",
+            "https://cn-north-1.console.amazonaws.cn/ecr/repositories/private/"
+            "123456789012/repo?region=cn-north-1",
+        ),
+        # GovCloud partition (detected from the region prefix)
+        (
+            "123456789012.dkr.ecr.us-gov-west-1.amazonaws.com/repo",
+            "https://us-gov-west-1.console.amazonaws-us-gov.com/ecr/repositories/private/"
+            "123456789012/repo?region=us-gov-west-1",
+        ),
+        # --- ECR Public ---
+        ("public.ecr.aws/nginx/nginx", "https://gallery.ecr.aws/nginx/nginx"),
+        # --- GAR: image drill-in vs repo-only delegation ---
+        (
+            "us-docker.pkg.dev/proj/repo/img",
+            "https://console.cloud.google.com/artifacts/docker/proj/us/repo/img?project=proj",
+        ),
+        (
+            "europe-west1-docker.pkg.dev/proj/repo",
+            "https://console.cloud.google.com/artifacts/docker/proj/europe-west1/repo?project=proj",
+        ),
+        # --- GCR legacy ---
+        (
+            "gcr.io/proj/img",
+            "https://console.cloud.google.com/gcr/images/proj/GLOBAL/img?project=proj",
+        ),
+        (
+            "us.gcr.io/proj/img",
+            "https://console.cloud.google.com/gcr/images/proj/US/img?project=proj",
+        ),
+        (
+            "gcr.io/proj",
+            "https://console.cloud.google.com/gcr/images/proj?project=proj",
+        ),
+        # --- Docker Hub ---
+        ("nginx", "https://hub.docker.com/_/nginx"),
+        ("library/nginx", "https://hub.docker.com/_/nginx"),
+        ("nginx:1.25", "https://hub.docker.com/_/nginx/tags?name=1.25"),
+        ("bitnami/nginx", "https://hub.docker.com/r/bitnami/nginx"),
+        ("bitnami/nginx:1.25", "https://hub.docker.com/r/bitnami/nginx/tags?name=1.25"),
+        # --- OCIR (no OCID in ref -> registry landing page) ---
+        ("iad.ocir.io/tenancy/repo", "https://cloud.oracle.com/registry/containers/repos"),
+        # --- unknown registry -> Docker Hub search fallback ---
+        ("quay.io/org/app", "https://hub.docker.com/search?q=org/app"),
+    ],
+)
+def test_image_console_link(ref, expected):
+    assert image_console_link(ref) == expected
+
+
+def test_acr_with_hints():
+    url = image_console_link(
+        "myreg.azurecr.io/app",
+        subscription_id="SUB",
+        resource_group="RG",
+    )
+    arm_id = "/subscriptions/SUB/resourceGroups/RG/providers/Microsoft.ContainerRegistry/registries/myreg"
+    expected = (
+        "https://portal.azure.com/#view/Microsoft_Azure_ContainerRegistries/"
+        f"RepositoryBlade/registryId/{quote(arm_id, safe='')}/repository/app"
+    )
+    assert url == expected
+
+
+def test_acr_without_hints_browse_fallback():
+    url = image_console_link("myreg.azurecr.io/app")
+    assert url == (
+        "https://portal.azure.com/#blade/HubsExtension/BrowseResource/"
+        "resourceType/Microsoft.ContainerRegistry%2Fregistries"
+    )
+
+
+def test_acr_partial_hints_falls_back():
+    # only one of the two required hints -> still the browse fallback
+    url = image_console_link("myreg.azurecr.io/app", subscription_id="SUB")
+    assert "BrowseResource" in url
+
+
+def test_invalid_ref_raises():
+    with pytest.raises(ValueError):
+        image_console_link("")
+
+
+def test_gar_single_segment_raises_clear_error():
+    with pytest.raises(ValueError, match="GAR image reference needs"):
+        image_console_link("us-docker.pkg.dev/proj")

cloudconsolelink-4.1.1/tests/test_registry_parse.py

@@ -0,0 +1,92 @@
+import pytest
+
+from cloudconsolelink.clouds.registry import ImageRef, classify, parse_image_ref
+
+
+@pytest.mark.parametrize(
+    "ref, expected",
+    [
+        # bare name -> Docker Hub, no host
+        ("nginx", ImageRef("", "nginx", "", "")),
+        ("nginx:1.25", ImageRef("", "nginx", "1.25", "")),
+        ("library/nginx", ImageRef("", "library/nginx", "", "")),
+        # explicit docker.io host
+        ("docker.io/library/nginx:latest", ImageRef("docker.io", "library/nginx", "latest", "")),
+        # ECR private, the motivating example
+        (
+            "602401143452.dkr.ecr.us-east-2.amazonaws.com/amazon-k8s-cni-init",
+            ImageRef("602401143452.dkr.ecr.us-east-2.amazonaws.com", "amazon-k8s-cni-init", "", ""),
+        ),
+        # tag + digest together
+        (
+            "reg.example.com/team/app:v1@sha256:abcdef",
+            ImageRef("reg.example.com", "team/app", "v1", "sha256:abcdef"),
+        ),
+        # digest only
+        (
+            "602401143452.dkr.ecr.us-east-2.amazonaws.com/repo@sha256:deadbeef",
+            ImageRef("602401143452.dkr.ecr.us-east-2.amazonaws.com", "repo", "", "sha256:deadbeef"),
+        ),
+        # host with port
+        ("localhost:5000/my/img:dev", ImageRef("localhost:5000", "my/img", "dev", "")),
+        ("localhost/img", ImageRef("localhost", "img", "", "")),
+        # multi-segment repository (GAR: project/repo/image)
+        (
+            "us-docker.pkg.dev/proj/repo/img:tag",
+            ImageRef("us-docker.pkg.dev", "proj/repo/img", "tag", ""),
+        ),
+        # surrounding whitespace stripped
+        ("  nginx:1  ", ImageRef("", "nginx", "1", "")),
+    ],
+)
+def test_parse_image_ref(ref, expected):
+    assert parse_image_ref(ref) == expected
+
+
+@pytest.mark.parametrize("bad", ["", "   ", None])
+def test_parse_image_ref_empty_raises(bad):
+    with pytest.raises(ValueError):
+        parse_image_ref(bad)
+
+
+def test_parse_image_ref_host_only_no_repo_raises():
+    # host present but nothing after the slash
+    with pytest.raises(ValueError):
+        parse_image_ref("reg.example.com/")
+
+
+@pytest.mark.parametrize("bad", ["repo@", "reg.io/repo@", "reg.io/a/b:v1@"])
+def test_parse_image_ref_empty_digest_raises(bad):
+    with pytest.raises(ValueError, match="empty digest"):
+        parse_image_ref(bad)
+
+
+@pytest.mark.parametrize("bad", ["repo:", "reg.io/repo:", "reg.io/a/b:"])
+def test_parse_image_ref_empty_tag_raises(bad):
+    with pytest.raises(ValueError, match="empty tag"):
+        parse_image_ref(bad)
+
+
+@pytest.mark.parametrize(
+    "host, family",
+    [
+        ("", "dockerhub"),
+        ("docker.io", "dockerhub"),
+        ("registry-1.docker.io", "dockerhub"),
+        ("index.docker.io", "dockerhub"),
+        ("public.ecr.aws", "ecr-public"),
+        ("602401143452.dkr.ecr.us-east-2.amazonaws.com", "ecr"),
+        ("123456789012.dkr.ecr.cn-north-1.amazonaws.com.cn", "ecr"),
+        ("us-docker.pkg.dev", "gar"),
+        ("europe-west1-docker.pkg.dev", "gar"),
+        ("gcr.io", "gcr"),
+        ("us.gcr.io", "gcr"),
+        ("asia.gcr.io", "gcr"),
+        ("iad.ocir.io", "ocir"),
+        ("myregistry.azurecr.io", "acr"),
+        ("unknown.example.com", ""),
+        ("quay.io", ""),
+    ],
+)
+def test_classify(host, family):
+    assert classify(host) == family