Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-4431

Quay 3.8.0 proxy cache failed to validate Azure Container Registry(ACR)

XMLWordPrintable

    • False
    • None
    • False

      Description:

      This is an issue found when use proxy cache to validate Azure Container Registry, after create new organization, input valid remote ACR registry and valid username and password, Quay reported failed to validate Azure ACR, see attached Quay App Pod logs quay380_app2.logs , while with same ACR registry and credentials, podman login works well.

      Quay Image: quay-operator-bundle-container-v3.8.0-63

      [root@ip-10-0-1-18 fedora]# podman login quay380.azurecr.io
      Username: quay380
      Password: 
      Login Succeeded! 
      Quay 3.8.0 Proxy Cache validate Azure ACR:

      gunicorn-web stdout | 2022-09-08 05:44:51,167 [180] [DEBUG] [urllib3.connectionpool] https://quay380.azurecr.io:443 "GET /oauth2/token?service=quay380.azurecr.io&scope=repository:something-totally-fake:pull HTTP/1.1" 200 None
      gunicorn-web stdout | 2022-09-08 05:44:51,167 [180] [DEBUG] [data.cache.impl] Checking cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake
      gunicorn-web stdout | 2022-09-08 05:44:51,168 [180] [DEBUG] [data.cache.impl] Found no result in cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake; calling loader
      gunicorn-web stdout | 2022-09-08 05:44:51,168 [180] [DEBUG] [data.cache.impl] Got loaded result for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake: {'token': None}
      gunicorn-web stdout | 2022-09-08 05:44:51,168 [180] [DEBUG] [data.cache.impl] Caching loaded result for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake with expiration {'token': None}: 3590s
      gunicorn-web stdout | 2022-09-08 05:44:51,168 [180] [DEBUG] [data.cache.impl] Cached loaded result for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake with expiration {'token': None}: 3590s
      gunicorn-web stdout | 2022-09-08 05:44:51,186 [180] [DEBUG] [urllib3.connectionpool] https://quay380.azurecr.io:443 "GET /v2/ HTTP/1.1" 401 149
      gunicorn-web stdout | 2022-09-08 05:44:51,187 [180] [DEBUG] [data.cache.impl] Checking cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake
      gunicorn-web stdout | 2022-09-08 05:44:51,187 [180] [DEBUG] [data.cache.impl] Found result in cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake: {'token': None}
      gunicorn-web stdout | 2022-09-08 05:44:51,205 [180] [DEBUG] [urllib3.connectionpool] https://quay380.azurecr.io:443 "GET /v2/ HTTP/1.1" 401 149
      gunicorn-web stdout | 2022-09-08 05:44:51,229 [180] [DEBUG] [urllib3.connectionpool] https://quay380.azurecr.io:443 "GET /oauth2/token?service=quay380.azurecr.io&scope=repository:something-totally-fake:pull HTTP/1.1" 200 None
      gunicorn-web stdout | 2022-09-08 05:44:51,229 [180] [DEBUG] [data.cache.impl] Checking cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake
      gunicorn-web stdout | 2022-09-08 05:44:51,229 [180] [DEBUG] [data.cache.impl] Found result in cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake: {'token': None}
      gunicorn-web stdout | 2022-09-08 05:44:51,248 [180] [DEBUG] [urllib3.connectionpool] https://quay380.azurecr.io:443 "GET /v2/ HTTP/1.1" 401 149
      gunicorn-web stdout | 2022-09-08 05:44:51,252 [180] [DEBUG] [app] Ending request: urn:request:af0acbd0-556b-43b0-bca4-287d717c3a08 (/api/v1/organization/testproxy/validateproxycache) {'endpoint': 'api.proxycacheconfigvalidation', 'request_id': 'urn:request:af0acbd0-556b-43b0-bca4-287d717c3a08', 'remote_addr': '10.128.2.21', 'http_method': 'POST', 'original_url': 'https://quayregistry-quay-quay-enterprise-12485.apps.quaytest-12485.qe.devcluster.openshift.com/api/v1/organization/testproxy/validateproxycache', 'path': '/api/v1/organization/testproxy/validateproxycache', 'parameters': {}, 'json_body': {'org_name': 'testproxy', 'expiration_s': 86400, 'insecure': False, 'upstream_registry': 'quay380.azurecr.io', 'upstream_registry_username': '[FILTERED]', 'upstream_registry_password': '[FILTERED]'}, 'confsha': '2a0d4ac3', 'user-agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:104.0) Gecko/20100101 Firefox/104.0'}
      gunicorn-web stdout | 2022-09-08 05:44:51,253 [180] [DEBUG] [data.database] Disconnecting from database.
      gunicorn-web stdout | 2022-09-08 05:44:51,253 [180] [INFO] [gunicorn.access] 10.128.2.21 - - [08/Sep/2022:05:44:51 +0000] "POST /api/v1/organization/testproxy/validateproxycache HTTP/1.0" 400 402 "https://quayregistry-quay-quay-enterprise-12485.apps.quaytest-12485.qe.devcluster.openshift.com/organization/testproxy?tab=settings" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:104.0) Gecko/20100101 Firefox/104.0" 

            hgovinda Harish Govindarajulu
            lzha1981 luffy zhang
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: