Loading...

Type: Bug
Resolution: Done-Errata
Priority: Critical
Fix Version/s: None
Affects Version/s: quay-v3.12.0, quay-v3.11.2
Component/s: quay
Labels:
- triaged

Blocked:
False
Blocked Reason:
None
Ready:
False
Git Pull Request:
https://github.com/quay/quay/pull/3089
Intelligence Requested:
Market:

Target Version:

quay-v3.12.3

SFDC Cases Links:
SFDC Cases Counter:
SFDC Cases Open:

Description:

This is an issue found when taking validation testing with Hitachi HCP CS, now with Quay RadosGWStorage storage engine, pull image was failed with 400 error code, here Quay should not use signature-version v2 to fetch image layer from Hitachi HCP CS Storage, pls review this issue.

Quay: 3.12

Pull image was failed with 400 error code:

skopeo copy --src-creds=whuquay:12345678 --src-tls-verify=false docker://quayregistry-quay-quay-enterprise.apps.whu415az48.qe.azure.devcluster.openshift.com/whu_org/repo:v1  docker-archive:/Users/whu/root/gitlab_redhat/quay_tools/image_pull_push/repo_v1_20240725_152056/repo.tar
Getting image source signatures
Copying blob d3deabf2a506 [--------------------------------------] 0.0b / 2.7MiB | 0.0 b/s
FATA[0006] reading blob sha256:d3deabf2a506ef6f5fa7c2a68bf27047574cef9908b30a97ff2d01ae539b089a: fetching blob: StatusCode: 400, "<?xml version='1.0' encoding='UTF-8'?><Error><Code..."

Quay config.yaml:

DISTRIBUTED_STORAGE_DEFAULT_LOCATIONS: 
  - default
DISTRIBUTED_STORAGE_PREFERENCE:
  - default
DISTRIBUTED_STORAGE_CONFIG:
  default:
    - RadosGWStorage
    - access_key: AS.....-k 
      bucket_name:  quay311 
      hostname:  tryhcpforcloudscale.hitachivantara.com 
      is_secure: true
      port: "443"
      secret_key: 39.....2 
      storage_path: /datastorage/registry

Quay Logs:

securityworker stdout | 2024-07-25 10:35:00,070 [86] [DEBUG] [storage.downloadproxy] Proxying via URL https://quayregistry-quay-quay-enterprise.apps.whu415az48.qe.azure.devcluster.openshift.com/_storage_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/https/tryhcpforcloudscale.hitachivantara.com:443/quay311/datastorage/registry/sha256/d3/d3deabf2a506ef6f5fa7c2a68bf27047574cef9908b30a97ff2d01ae539b089a?AWSAccessKeyId=ASUW60_nBCPs2yN2Eth4MvQXECNAxcpwt3wTbosIa7RXcqZskXDFNwEHIxCPteZXrnrurcZjmot97-k&Signature=SXr0CHdUTRVHRvjlw6XDX2%2Faork%3D&Expires=1721904300

is cloned by

PROJQUAY-7798 Quay 3.11 pull image was failed with Hitachi HCP CS Storage