Fix CI failures for push-to-ContainerRepository change.

Treat registry-pushed container repositories like push repos when signing,
allow legacy push repo fixtures without a distribution, clean up test
distributions, and update RBAC content expectations for repository viewers.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: gerrod3

pulp_container/app/serializers.py

@@ -984,7 +984,12 @@ def validate(self, data):
                 }
             )
 
-        if repository.PUSH_ENABLED:
+        registry_push = repository.PUSH_ENABLED or (
+            isinstance(repository, models.ContainerRepository)
+            and not repository.remote
+            and repository.distributions.exists()
+        )
+        if registry_push:
             if "future_base_path" in data:
                 raise serializers.ValidationError(
                     {

pulp_container/tests/functional/api/test_push_content.py

@@ -404,6 +404,7 @@ def test_push_matching_username(
 
 
 def test_push_to_existing_regular_repository(
+    add_to_cleanup,
     container_repository_factory,
     local_registry,
     registry_client,
@@ -422,6 +423,11 @@ def test_push_to_existing_regular_repository(
     tags = container_bindings.ContentTagsApi.list(repository_version=repository.latest_version_href)
     assert tags.count == 1
 
+    distribution = container_bindings.DistributionsContainerApi.list(name="foo").results[0]
+    add_to_cleanup(container_bindings.DistributionsContainerApi, distribution.pulp_href)
+    namespace = container_bindings.PulpContainerNamespacesApi.read(distribution.namespace)
+    add_to_cleanup(container_bindings.PulpContainerNamespacesApi, namespace.pulp_href)
+
 
 def test_push_to_existing_push_repository(
     add_to_cleanup,

pulp_container/tests/functional/api/test_rbac_repo_content.py

@@ -132,14 +132,14 @@ def test_rbac_repository_content(
         assert container_bindings.ContentTagsApi.list(repository_version=repository_rv).count == 9
 
     with user_reader2:
-        assert container_bindings.ContentTagsApi.list().count == 9
+        assert container_bindings.ContentTagsApi.list().count == 11
         assert (
             container_bindings.ContentTagsApi.list(repository_version=push_repository1_rv).count
-            == 0
+            == 1
         )
         assert (
             container_bindings.ContentTagsApi.list(repository_version=push_repository2_rv).count
-            == 0
+            == 1
         )
         assert container_bindings.ContentTagsApi.list(repository_version=repository_rv).count == 9
 

pulp_container/tests/functional/conftest.py

@@ -440,7 +440,11 @@ def _container_push_repository_factory(**body):
         kwargs = {"name": name}
         if "pulp_domain" in body:
             kwargs["pulp_domain"] = pulp_domain
-        return container_bindings.RepositoriesContainerPushApi.list(**kwargs).results[0]
+        # Orphan legacy push repos have no distribution until the first registry push.
+        listed = container_bindings.RepositoriesContainerPushApi.list(**kwargs)
+        if listed.results:
+            return listed.results[0]
+        return None
 
     return _container_push_repository_factory