feat: Implement CRUD API for managing Harbor per-project Quota

[jopemachine]

Resolves #1911.

Implement CRUD for controlling Harbor per-project Quota.

Important

Currently, the Project Quota API implemented in this PR is only available for the HarborV2 registry.

Details

• In practice, the HarborV2 Quota API has no delete or create methods. But if you query a quota that does not exist, it returns -1. Using the update API at this point creates the quota. Updating it back to -1 resets it to an unlimited quota. Using this approach, I implemented all CRUD operations.

• Quota mutations can only be executed by admin, superadmin, while quota queries are accessible to regular users if they have READ permissions.

Implementation Check list

• REST API
• Graphql API
• Client SDK

Client code example

import asyncio
from ai.backend.client.session import AsyncSession

async def main():
    async with AsyncSession() as session:
        await session.Group.update_container_registry_quota("2de2b969-1d04-48a6-af16-0bc8adb3c831", 1200)

if __name__ == "__main__":
    asyncio.run(main())

GQL example

mutation {
  update_container_registry_quota(scope_id: "project:2de2b969-1d04-48a6-af16-0bc8adb3c831", quota: 100) {
    ok
    msg
  }
}

Reference

• Access Harbor API documentation

---

Checklist: (if applicable)

• Milestone metadata specifying the target backport version
• Mention to the original issue
• API server-client counterparts (e.g., manager API -> client SDK)

---

📚 Documentation preview 📚: https://sorna--3090.org.readthedocs.build/en/3090/

---

📚 Documentation preview 📚: https://sorna-ko--3090.org.readthedocs.build/ko/3090/

[jopemachine]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• feat: Implement Image Rescanning using Harbor Webhook API #3116
• feat: Implement CRUD API for managing Harbor per-project Quota #3090 👈 (View in Graphite)
• feat: Implement ImageNode, ImageNodes as per-project images API #3036
• feat: Implement Image RBAC project scope #3035
• feat: Implement APIs for associating, disassociating container_registries with groups #3067
• feat: Implement m2m table for container_registries, and groups #3065
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[jopemachine]

Remaining tasks: Adding REST API and SDK.

[jopemachine]

@fregataa If possible, instead of hardcoding the scope_id like this, I’d prefer to create a ProjectScope object and serialize it. However, since the ProjectScope type is currently located under the models directory, this violates the pants visibility rule.

What do you think about moving the types related to ScopeField under the common directory?

[jopemachine]

@fregataa Registry quota READ operation can be executed even if the user is not an admin.
However, it seems that GQL queries in the current SDK can only be executed through Admin.
What do you think about adding this query, _query functions to User as well?

[HyeockJinKim]

can we use PATCH, DELETE method? @fregataa