diff options
| author | Bartosz Bezak <bartosz@stackhpc.com> | 2025-08-04 11:31:26 +0200 |
|---|---|---|
| committer | Bartosz Bezak <bartosz@stackhpc.com> | 2025-08-06 11:50:39 +0200 |
| commit | ddac7ca1ed393609b7bda8753db3598f1ae02648 (patch) | |
| tree | 7bf0adec2a75b26ebe79acb2d6a3170f42b65472 /docker | |
| parent | 9f24ce63d0ce245cc732a9c47a7dd4c39ee42066 (diff) | |
| download | kolla-ddac7ca1ed393609b7bda8753db3598f1ae02648.tar.gz kolla-ddac7ca1ed393609b7bda8753db3598f1ae02648.zip | |
send empty X-Registry-Auth for anonymous pushes
Since Docker 28.3.3 the daemon rejects a push that carries no
`X-Registry-Auth` header [1]. The SDK already sets this header when it
finds credentials, so the breakage happens only on anonymous pushes.
During `PushTask.push_image()` we now check whether the SDK can resolve
credentials for the target registry; if it cannot, we inject
`auth_config={}`, causing the SDK to send the minimal "{}" header that
satisfies the daemon while leaving authenticated pushes unchanged.
Drop this addition when [2] is fixed.
[1] https://github.com/moby/moby/pull/50371
[2] https://github.com/docker/docker-py/issues/3348
Closes-Bug: #2119619
Change-Id: I7a2f3fce223afd74741b40bf62836b325fca5b19
Signed-off-by: Bartosz Bezak <bartosz@stackhpc.com>
Diffstat (limited to 'docker')
0 files changed, 0 insertions, 0 deletions