deployment without google account, through minikube (#43)

This PR solves #31 ,
#24

Partially addresses #23

## Changes
- Support users to try manatee without a google account, completely
deployed on local. Components comparison:

| | Google Cloud     | Local |
| ----| ----------- | ----------- |
|Cluster| GKE      | Minikube       |
|Database| Cloud database   | Mysql        |
|Storage| Google cloud storage   | Minio      |
|Docker Registry| Google artifact registry   | Minikube addon      |
|TEE Backend| Google confidential space | Mock TEE backend: job on
kubernetes |

- Add storage interface and two implementations: gcs and minio 
- Add registry interface and two implementations: gcp and minikube
- Add signed url feature, so the tee only uses `curl` to upload output
and custom attestation token.
- Add mock tee backend implement
- Modify jupyterhub extension to support signed url feature
- Fixed the bug of getting attestation
- A document in `docs/getting-started/minikube.md` guides users how to
deploy manatee locally.

## Caveats
- Introduced many environment variables through config map. The config
values should be managed at one place. Will open a new MR to solve it.

## Testing
- end-to-end testing for minikube deployment.
- end-to-end testing for GCP deployment

---------

Co-authored-by: Dayeol Lee <dayeol.lee@tiktok.com>

Author: privacywill

BUILD

@@ -40,3 +40,11 @@ multirun(
     ],
     jobs = 0,
 )
+
+multirun(
+    name = "load_all_images",
+    commands = [
+        "//app/{}:load_image".format(k)
+        for k in REPOS.keys()
+    ],
+)

MODULE.bazel

@@ -97,14 +97,17 @@ use_repo(
     "com_github_cloudwego_hertz",
     "com_github_gin_gonic_gin",
     "com_github_google_uuid",
+    "com_github_minio_minio_go_v7",
     "com_github_pkg_errors",
     "com_google_cloud_go_compute",
+    "com_google_cloud_go_iam",
     "com_google_cloud_go_storage",
     "io_gorm_driver_mysql",
     "io_gorm_gorm",
     "io_k8s_api",
     "io_k8s_apimachinery",
     "io_k8s_client_go",
+    "org_golang_google_genproto",
     "org_golang_google_protobuf",
 )
 

app/dcr_api/.hz

@@ -1,6 +1,6 @@
 // Code generated by hz. DO NOT EDIT.
 
-hz version: v0.9.0
+hz version: v0.9.1
 handlerDir: ""
 modelDir: biz/model
 routerDir: ""

app/dcr_api/BUILD.bazel

@@ -46,4 +46,5 @@ oci_load(
     name = "load_image",
     image = ":image",
     repo_tags = ["dcr_api:latest"],
+    visibility = ["//visibility:public"],
 )

app/dcr_api/biz/dal/db/job.go

@@ -23,18 +23,19 @@ import (
 
 type Job struct {
 	gorm.Model
-	ID                uint64            `gorm:"id" json:"id""`
-	UUID              string            `gorm:"uuid" json:"uuid"`
-	Creator           string            `gorm:"creator" json:"creator"`
-	JupyterFileName   string            `gorm:"jupyter_file_name" json:"jupyter_file_name"`
-	BuildContextPath  string            `gorm:"build_context_path" json:"build_context_path"`
-	Dockerfile        string            `gorm:"dockerfile" json:"dockerfile"`
-	DockerImage       string            `gorm:"docker_image" json:"docker_image"`
-	DockerImageDigest string            `gorm:"docker_image_digest" json:"docker_image_digest"`
-	AttestationReport string            `gorm:"attestation_report" json:"attestation_report"`
-	JobStatus         int               `gorm:"job_status" json:"job_status"`
-	InstanceName      string            `gorm:"instance_name" json:"instance_name"`
-	ExtraEnvs         map[string]string `gorm:"serializer:json"`
+	ID                      uint64            `gorm:"id" json:"id""`
+	UUID                    string            `gorm:"uuid" json:"uuid"`
+	Creator                 string            `gorm:"creator" json:"creator"`
+	JupyterFileName         string            `gorm:"jupyter_file_name" json:"jupyter_file_name"`
+	BuildContextPath        string            `gorm:"build_context_path" json:"build_context_path"`
+	OutputPutSignedUrl      string            `gorm:"output_put_signed_url" json:"output_put_signed_url"`
+	CustomTokenPutSignedUrl string            `gorm:"custom_token_put_signed_url" json:"custom_token_put_signed_url"`
+	Dockerfile              string            `gorm:"dockerfile" json:"dockerfile"`
+	DockerImage             string            `gorm:"docker_image" json:"docker_image"`
+	DockerImageDigest       string            `gorm:"docker_image_digest" json:"docker_image_digest"`
+	JobStatus               int               `gorm:"job_status" json:"job_status"`
+	InstanceName            string            `gorm:"instance_name" json:"instance_name"`
+	ExtraEnvs               map[string]string `gorm:"serializer:json"`
 }
 
 func (Job) TableName() string {
@@ -59,7 +60,6 @@ func UpdateJob(j *Job) error {
 			BuildContextPath:  j.BuildContextPath,
 			DockerImageDigest: j.DockerImageDigest,
 			DockerImage:       j.DockerImage,
-			AttestationReport: j.AttestationReport,
 			InstanceName:      j.InstanceName,
 			ExtraEnvs:         j.ExtraEnvs,
 		})