[MESOS-9967] Authorization header is missing when using a default registry

• Type: Bug
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Affects Version/s: 1.9.1
• Component/s: containerization
• Assignee: Unassigned
• Reporter: Stéphane Cottin
• Created: 15/Sep/19 11:32
• Updated: 18/Sep/19 20:21

Description

When using credentials from --docker_config and a private registry from --docker-registry the authorization header is not set on fetcher requests.

If I prefix the tasks image name with the registry name (same as --docker-registry content), the authorization header is set.

Logs from our nexus :

• Using registry from --docker_registry, no Authorization header.

  [0] all: [1568545789.158677273, {"message"=>"2019-09-15 11:09:49,158+0000 DEBUG [qtp429493550-858] *UNKNOWN org.sonatype.nexus.repository.view.Router - Request: Request{action='GET', path='/v2/nginx/manifests/latest', parameters={}, payload=HttpRequestPayloadAdapter{contentType='null', size=-1}, multipart=false}"}]
  [0] all: [1568545789.158715516, {"message"=>"2019-09-15 11:09:49,158+0000 TRACE [qtp429493550-858] *UNKNOWN org.sonatype.nexus.repository.view.Router - Request headers:"}]
  [0] all: [1568545789.158768141, {"message"=>"2019-09-15 11:09:49,158+0000 TRACE [qtp429493550-858] *UNKNOWN org.sonatype.nexus.repository.view.Router -   Accept: application/vnd.docker.distribution.manifest.v2+json,application/vnd.docker.distribution.manifest.v1+json,application/vnd.docker.distribution.manifest.v1+prettyjws"}]
  [0] all: [1568545789.158807035, {"message"=>"2019-09-15 11:09:49,158+0000 TRACE [qtp429493550-858] *UNKNOWN org.sonatype.nexus.repository.view.Router -   User-Agent: curl/7.64.0"}]
  [0] all: [1568545789.158841066, {"message"=>"2019-09-15 11:09:49,158+0000 TRACE [qtp429493550-858] *UNKNOWN org.sonatype.nexus.repository.view.Router -   X-Forwarded-Proto: https"}]
  [0] all: [1568545789.158878582, {"message"=>"2019-09-15 11:09:49,158+0000 TRACE [qtp429493550-858] *UNKNOWN org.sonatype.nexus.repository.view.Router -   Connection: close"}]
  [0] all: [1568545789.158940270, {"message"=>"2019-09-15 11:09:49,158+0000 TRACE [qtp429493550-858] *UNKNOWN org.sonatype.nexus.repository.view.Router -   Host: REDACTED"}]
  [0] all: [1568545789.158991347, {"message"=>"2019-09-15 11:09:49,158+0000 TRACE [qtp429493550-858] *UNKNOWN org.sonatype.nexus.repository.view.Router -   X-Forwarded-Port: 443"}]
  [0] all: [1568545789.159013479, {"message"=>"2019-09-15 11:09:49,158+0000 TRACE [qtp429493550-858] *UNKNOWN org.sonatype.nexus.repository.view.Router -   X-Forwarded-For:  REDACTED"}]
  [0] all: [1568545789.159037316, {"message"=>"2019-09-15 11:09:49,158+0000 TRACE [qtp429493550-858] *UNKNOWN org.sonatype.nexus.repository.view.Router - Request attributes:"}]
  

• Same app with complete (registry/path) image name, the Authorization header is present

  [0] all: [1568545895.169586275, {"message"=>"2019-09-15 11:11:35,169+0000 DEBUG [qtp429493550-861] REDACTED org.sonatype.nexus.repository.view.Router - Request: Request{action='GET', path='/v2/nginx/manifests/latest', parameters={}, payload=HttpRequestPayloadAdapter{contentType='null', size=-1}, multipart=false}"}]
  [0] all: [1568545895.169618211, {"message"=>"2019-09-15 11:11:35,169+0000 TRACE [qtp429493550-861] REDACTED org.sonatype.nexus.repository.view.Router - Request headers:"}]
  [0] all: [1568545895.169656574, {"message"=>"2019-09-15 11:11:35,169+0000 TRACE [qtp429493550-861] REDACTED org.sonatype.nexus.repository.view.Router -   Accept: application/vnd.docker.distribution.manifest.v2+json,application/vnd.docker.distribution.manifest.v1+json,application/vnd.docker.distribution.manifest.v1+prettyjws"}]
  [0] all: [1568545895.169688737, {"message"=>"2019-09-15 11:11:35,169+0000 TRACE [qtp429493550-861] REDACTED org.sonatype.nexus.repository.view.Router -   User-Agent: curl/7.64.0"}]
  [0] all: [1568545895.169715047, {"message"=>"2019-09-15 11:11:35,169+0000 TRACE [qtp429493550-861] REDACTED org.sonatype.nexus.repository.view.Router -   X-Forwarded-Proto: https"}]
  [0] all: [1568545895.169743613, {"message"=>"2019-09-15 11:11:35,169+0000 TRACE [qtp429493550-861] REDACTED org.sonatype.nexus.repository.view.Router -   Connection: close"}]
  [0] all: [1568545895.169776322, {"message"=>"2019-09-15 11:11:35,169+0000 TRACE [qtp429493550-861] REDACTED org.sonatype.nexus.repository.view.Router -   Host: REDACTED"}]
  [0] all: [1568545895.169816235, {"message"=>"2019-09-15 11:11:35,169+0000 TRACE [qtp429493550-861] REDACTED org.sonatype.nexus.repository.view.Router -   X-Forwarded-Port: 443"}]
  [0] all: [1568545895.169863931, {"message"=>"2019-09-15 11:11:35,169+0000 TRACE [qtp429493550-861] REDACTED org.sonatype.nexus.repository.view.Router -   Authorization: Basic REDACTED="}]
  [0] all: [1568545895.169899204, {"message"=>"2019-09-15 11:11:35,169+0000 TRACE [qtp429493550-861] REDACTED org.sonatype.nexus.repository.view.Router -   X-Forwarded-For: REDACTED"}]