Event based replication failed with registry.gitlab.com · goharbor/harbor#21066

(3 评论) (2 反应) (0 负责人)Go (28,490 star) (5,235 fork)batch import

area/replicationhelp wantedkind/bugnever-stale

描述

Steps to reproduce

Setup a event based replication from Harbor to registry.gitlab.com, which support delete remote resource when local resource is deleted. the token in registry.gitlab.com should have full access to the registry(read_registry, write_registry)
Push a new image to Harbor project
Verify the new image is replicated to the registry.gitlab.com
Delete the new image in the Harbor, it should trigger a replication job to delete the image from registry.gitlab.com, but the replication failed with following error message:

error message:

2024-10-20T04:55:39Z [INFO] [/controller/replication/transfer/image/transfer.go:140]: client for source registry [type: harbor, URL: https://core:8443, insecure: false] created
2024-10-20T04:55:39Z [INFO] [/controller/replication/transfer/image/transfer.go:150]: client for destination registry [type: gitlab, URL: https://registry.gitlab.com, insecure: true] created
2024-10-20T04:55:41Z [ERROR] [/controller/replication/transfer/image/transfer.go:533]: failed to delete the manifest of artifact harbor424542/harbor-ci/test_push_repli:v1.1.0 on the destination registry: http status code: 401, body: {"errors":[{"code":"UNAUTHORIZED","message":"authentication required","detail":[{"Type":"repository","Class":"","Name":"harbor424542/harbor-ci/test_push_repli","ProjectPath":"","Action":"delete"}]}]}

贡献者指南

技术栈: gorest api
领域: backendapi
议题类型: bug
难度: 3
预计时间: 1-3 hours
活动状态: fresh
清晰度: mostly clear
前置要求: GoDocker Registry APIGitLab token permissions
新手友好度: 40
研究方向: Investigate the 401 Unauthorized error when deleting manifests on registry.gitlab.com. The error occurs in transfer.go at line 533. Check if the GitLab registry client is using the correct token scope for delete operations. The destination registry token must include delete permission (write registry). Review how the token is obtained and passed to the client. Also verify the endpont URL and authentication headers for delete requests. Look at existing integrations with GitLab registry in the codebase.