Pull-through from gcr.io returns 500 when pulling using podman/buildah
Maintainers usually reply within 1 day
A pull request for this has already been merged.
- #2582 by @am9zZWY — merged
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 68/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- python
- Domain
- authentication, backend
Research direction
Start by locating RegistryauthHttpDownloader.update_token() and tracing how it parses the www-authenticate header shown in the report. Reproduce the pull-through request with gcr.io using podman or buildah, then verify authentication handles the unquoted service value and the pull succeeds without a 500 response.
Written by the indexing model from the issue text.
Description
Version
pulp core: 3.121.1
pulp container: 2.30.0.dev
Describe the bug
Pulling from gcr.io through Pulp using podman/buildah/... (not docker) triggers a 500 error. The problem is that GCR returns unquoted headers which RegistryauthHttpDownloader.update_token() cannot parse.
These are the auth headers: www-authenticate: Bearer realm="https://gcr.io/v2/token",service=gcr.io
This is the error message:
pulp [649060ba005445eb899bebabe59c29d7]: django.request:ERROR: Internal Server Error: /extensions/v2/gcr/distroless/static/signatures/sha256:2293b36c7c9082bf4115aab724b4d2cddec82c8eba39bf27ac0517e159acf150"
To Reproduce
Setup a pull-through distribution with gcr.io as remote and pull through Pulp using podman/buildah/...
Expected behavior
Handle authentication headers correctly
- Dominant language
- Python
- Stars
- 31
- Forks
- 57
- Avg merge
- 21h 31m
- Merged PRs (30d)
- 76
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from pulp/pulp_container
-
Feature
Difficulty 3/5 1-2 days Newbie friendliness 65/100
pulp/pulp_container#2519 ·
Maintainers usually reply within 1 day
-
base_path uniqueness constraint prevents syncing the same image from multiple remote registriesOpenQuestion
Difficulty 5/5 Over a week Newbie friendliness 35/100
pulp/pulp_container#2495 · 1 comment ·
Maintainers usually reply within 1 day
-
Sync performance: skip /tags/list for specific tag listsPossibly taken @parmstro claimed this 12 days ago. Open
Difficulty 4/5 3-5 days Newbie friendliness 55/100
pulp/pulp_container#2474 ·
Maintainers usually reply within 1 day
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
pulp/pulp_container#2473 ·
Maintainers usually reply within 1 day
-
Task
Difficulty 3/5 1-2 days Newbie friendliness 45/100
pulp/pulp_container#2246 · 1 reaction ·
Maintainers usually reply within 1 day
All issues in pulp/pulp_container
Similar issues
-
comp/tools P2 type/bug
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
NousResearch/hermes-agent#142908 · 1 comment ·
-
[oblt-aw][autodoc] Fix malformed headings in new Buildkite docs pagesPossibly taken @github-actions claimed this today. Opendocumentation
Difficulty 1/5 Under an hour Newbie friendliness 83/100
Maintainers usually reply within 1 day
-
[Bug]: fileUploadMatrix.test.ts URL case does a real DNS lookup and fails offlinePossibly taken @r2jaff claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
ComposioHQ/composio#5054 ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 88/100
Maintainers usually reply within 1 day
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
pytorch/tensordict#3286 ·
Maintainers usually reply within 1 day