Loading...

Type: Bug
Resolution: Done
Priority: Critical
Fix Version/s: quay-v3.8.0, quay-v3.9.0
Affects Version/s: quay-v3.8.0
Component/s: quay
Labels:
- proxycache
- triaged

Blocked:
False
Blocked Reason:
None
Ready:
False

Target Version:

quay-v3.8.0, quay-v3.9.0

SFDC Cases Links:
SFDC Cases Counter:
SFDC Cases Open:

Description:

This is an issue found when use proxy cache to validate Azure Container Registry, after create new organization, input valid remote ACR registry and valid username and password, Quay reported failed to validate Azure ACR, see attached Quay App Pod logs quay380_app2.logs , while with same ACR registry and credentials, podman login works well.

Quay Image: quay-operator-bundle-container-v3.8.0-63

[root@ip-10-0-1-18 fedora]# podman login quay380.azurecr.io
Username: quay380
Password: 
Login Succeeded!

Quay 3.8.0 Proxy Cache validate Azure ACR:

gunicorn-web stdout | 2022-09-08 05:44:51,167 [180] [DEBUG] [urllib3.connectionpool] https://quay380.azurecr.io:443 "GET /oauth2/token?service=quay380.azurecr.io&scope=repository:something-totally-fake:pull HTTP/1.1" 200 None
gunicorn-web stdout | 2022-09-08 05:44:51,167 [180] [DEBUG] [data.cache.impl] Checking cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake
gunicorn-web stdout | 2022-09-08 05:44:51,168 [180] [DEBUG] [data.cache.impl] Found no result in cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake; calling loader
gunicorn-web stdout | 2022-09-08 05:44:51,168 [180] [DEBUG] [data.cache.impl] Got loaded result for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake: {'token': None}
gunicorn-web stdout | 2022-09-08 05:44:51,168 [180] [DEBUG] [data.cache.impl] Caching loaded result for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake with expiration {'token': None}: 3590s
gunicorn-web stdout | 2022-09-08 05:44:51,168 [180] [DEBUG] [data.cache.impl] Cached loaded result for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake with expiration {'token': None}: 3590s
gunicorn-web stdout | 2022-09-08 05:44:51,186 [180] [DEBUG] [urllib3.connectionpool] https://quay380.azurecr.io:443 "GET /v2/ HTTP/1.1" 401 149
gunicorn-web stdout | 2022-09-08 05:44:51,187 [180] [DEBUG] [data.cache.impl] Checking cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake
gunicorn-web stdout | 2022-09-08 05:44:51,187 [180] [DEBUG] [data.cache.impl] Found result in cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake: {'token': None}
gunicorn-web stdout | 2022-09-08 05:44:51,205 [180] [DEBUG] [urllib3.connectionpool] https://quay380.azurecr.io:443 "GET /v2/ HTTP/1.1" 401 149
gunicorn-web stdout | 2022-09-08 05:44:51,229 [180] [DEBUG] [urllib3.connectionpool] https://quay380.azurecr.io:443 "GET /oauth2/token?service=quay380.azurecr.io&scope=repository:something-totally-fake:pull HTTP/1.1" 200 None
gunicorn-web stdout | 2022-09-08 05:44:51,229 [180] [DEBUG] [data.cache.impl] Checking cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake
gunicorn-web stdout | 2022-09-08 05:44:51,229 [180] [DEBUG] [data.cache.impl] Found result in cache for key upstream_token__testproxy/quay380.azurecr.io/something-totally-fake: {'token': None}
gunicorn-web stdout | 2022-09-08 05:44:51,248 [180] [DEBUG] [urllib3.connectionpool] https://quay380.azurecr.io:443 "GET /v2/ HTTP/1.1" 401 149
gunicorn-web stdout | 2022-09-08 05:44:51,252 [180] [DEBUG] [app] Ending request: urn:request:af0acbd0-556b-43b0-bca4-287d717c3a08 (/api/v1/organization/testproxy/validateproxycache) {'endpoint': 'api.proxycacheconfigvalidation', 'request_id': 'urn:request:af0acbd0-556b-43b0-bca4-287d717c3a08', 'remote_addr': '10.128.2.21', 'http_method': 'POST', 'original_url': 'https://quayregistry-quay-quay-enterprise-12485.apps.quaytest-12485.qe.devcluster.openshift.com/api/v1/organization/testproxy/validateproxycache', 'path': '/api/v1/organization/testproxy/validateproxycache', 'parameters': {}, 'json_body': {'org_name': 'testproxy', 'expiration_s': 86400, 'insecure': False, 'upstream_registry': 'quay380.azurecr.io', 'upstream_registry_username': '[FILTERED]', 'upstream_registry_password': '[FILTERED]'}, 'confsha': '2a0d4ac3', 'user-agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:104.0) Gecko/20100101 Firefox/104.0'}
gunicorn-web stdout | 2022-09-08 05:44:51,253 [180] [DEBUG] [data.database] Disconnecting from database.
gunicorn-web stdout | 2022-09-08 05:44:51,253 [180] [INFO] [gunicorn.access] 10.128.2.21 - - [08/Sep/2022:05:44:51 +0000] "POST /api/v1/organization/testproxy/validateproxycache HTTP/1.0" 400 402 "https://quayregistry-quay-quay-enterprise-12485.apps.quaytest-12485.qe.devcluster.openshift.com/organization/testproxy?tab=settings" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:104.0) Gecko/20100101 Firefox/104.0"