Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-2722

Google Storage validation explicitly uses HTTP connection instead of HTTPS

    XMLWordPrintable

Details

    • 0

    Description

      When Google Storage is defined, the validator tool tries to contact it via a non-secure HTTP instead of using HTTPS. in some environments, where HTTP is not allowed, the validator will error out and not validate a completely sane configuration.

      The problematic line in the code is:

      https://github.com/quay/config-tool/blob/250e355a3004fefaf5136e4a46280d5f9c1902dc/pkg/lib/shared/storage_validators.go#L176

      The error message that the validator gives:

      Could not connect to storage googleCloudStorage. Error: Get "http://storage.googleapis.com/quay-image-layers/?location=": dial tcp 199.36.153.8:80: i/o timeout
      

      Marking this as a blocker, the validator should use https by default in much the same way as we use https to connect to AWS.

      Attachments

        Activity

          People

            sleesinc Kenny Lee Sin Cheong
            rhn-support-ibazulic Ivan Bazulic
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: