Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-2722

Google Storage validation explicitly uses HTTP connection instead of HTTPS

XMLWordPrintable

      When Google Storage is defined, the validator tool tries to contact it via a non-secure HTTP instead of using HTTPS. in some environments, where HTTP is not allowed, the validator will error out and not validate a completely sane configuration.

      The problematic line in the code is:

      https://github.com/quay/config-tool/blob/250e355a3004fefaf5136e4a46280d5f9c1902dc/pkg/lib/shared/storage_validators.go#L176

      The error message that the validator gives:

      Could not connect to storage googleCloudStorage. Error: Get "http://storage.googleapis.com/quay-image-layers/?location=": dial tcp 199.36.153.8:80: i/o timeout
      

      Marking this as a blocker, the validator should use https by default in much the same way as we use https to connect to AWS.

              sleesinc Kenny Lee Sin Cheong
              rhn-support-ibazulic Ivan Bazulic
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: