Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-7798

Quay 3.11 pull image was failed with Hitachi HCP CS Storage

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Critical Critical
    • None
    • quay-v3.11.2
    • quay

      Description:

      This is an issue found when taking validation testing with Hitachi HCP CS, now with Quay RadosGWStorage storage engine, pull image was failed with 400 error code, here Quay should not use signature-version v2 to fetch image layer from Hitachi HCP CS Storage, pls review this issue.

      Quay: 3.12

      Pull image was failed with 400 error code:

      skopeo copy --src-creds=whuquay:12345678 --src-tls-verify=false docker://quayregistry-quay-quay-enterprise.apps.whu415az48.qe.azure.devcluster.openshift.com/whu_org/repo:v1  docker-archive:/Users/whu/root/gitlab_redhat/quay_tools/image_pull_push/repo_v1_20240725_152056/repo.tar
Getting image source signatures
Copying blob d3deabf2a506 [--------------------------------------] 0.0b / 2.7MiB | 0.0 b/s
FATA[0006] reading blob sha256:d3deabf2a506ef6f5fa7c2a68bf27047574cef9908b30a97ff2d01ae539b089a: fetching blob: StatusCode: 400, "<?xml version='1.0' encoding='UTF-8'?><Error><Code..."

      Quay config.yaml:

      DISTRIBUTED_STORAGE_DEFAULT_LOCATIONS: 
  - default
DISTRIBUTED_STORAGE_PREFERENCE:
  - default
DISTRIBUTED_STORAGE_CONFIG:
  default:
    - RadosGWStorage
    - access_key: AS.....-k 
      bucket_name:  quay311 
      hostname:  tryhcpforcloudscale.hitachivantara.com 
      is_secure: true
      port: "443"
      secret_key: 39.....2 
      storage_path: /datastorage/registry

      Quay Logs:

      securityworker stdout | 2024-07-25 10:35:00,070 [86] [DEBUG] [storage.downloadproxy] Proxying via URL https://quayregistry-quay-quay-enterprise.apps.whu415az48.qe.azure.devcluster.openshift.com/_storage_proxy/ZXlKaGJHY2lPaUpTVXpJMU5pSXNJbXRwWkNJNklqWjVkSEZuZEVKSmRUaDNhRXBvTTBoRVYydEVURXhTWkZOQmR6RnJTelZKZGtKc2JGcDBYMDVtTVVraUxDSjBlWEFpT2lKS1YxUWlmUS5leUpwYzNNaU9pSnhkV0Y1SWl3aVlYVmtJam9pY1hWaGVYSmxaMmx6ZEhKNUxYRjFZWGt0Y1hWaGVTMWxiblJsY25CeWFYTmxMbUZ3Y0hNdWQyaDFOREUxWVhvME9DNXhaUzVoZW5WeVpTNWtaWFpqYkhWemRHVnlMbTl3Wlc1emFHbG1kQzVqYjIwaUxDSnVZbVlpT2pFM01qRTVNRE0zTURBc0ltbGhkQ0k2TVRjeU1Ua3dNemN3TUN3aVpYaHdJam94TnpJeE9UQXpOek13TENKemRXSWlPaUp6ZEc5eVlXZGxjSEp2ZUhraUxDSmhZMk5sYzNNaU9sdDdJblI1Y0dVaU9pSnpkRzl5WVdkbGNISnZlSGtpTENKMWNta2lPaUp4ZFdGNU16RXhMMlJoZEdGemRHOXlZV2RsTDNKbFoybHpkSEo1TDNOb1lUSTFOaTlrTXk5a00yUmxZV0ptTW1FMU1EWmxaalptTldaaE4yTXlZVFk0WW1ZeU56QTBOelUzTkdObFpqazVNRGhpTXpCaE9UZG1aakprTURGaFpUVXpPV0l3T0RsaFAwRlhVMEZqWTJWemMwdGxlVWxrUFVGVFZWYzJNRjl1UWtOUWN6SjVUakpGZEdnMFRYWlJXRVZEVGtGNFkzQjNkRE4zVkdKdmMwbGhOMUpZWTNGYWMydFlSRVpPZDBWSVNYaERVSFJsV2xoeWJuSjFjbU5hYW0xdmREazNMV3NtVTJsbmJtRjBkWEpsUFZOWWNqQkRTR1JWVkZKV1NGSjJhbXgzTmxoRVdESWxNa1poYjNKckpUTkVKa1Y0Y0dseVpYTTlNVGN5TVRrd05ETXdNQ0lzSW1odmMzUWlPaUowY25sb1kzQm1iM0pqYkc5MVpITmpZV3hsTG1ocGRHRmphR2wyWVc1MFlYSmhMbU52YlRvME5ETWlMQ0p6WTJobGJXVWlPaUpvZEhSd2N5SjlYU3dpWTI5dWRHVjRkQ0k2ZTMxOS56WjhUZGNEM3REc1k1cGVtMlNEYzRZdEUxRGNsUVNJZ2h6NllhUFpPbE0taTYzd01aQk1rVGVuOTJQeVF0Ym5SRFBxV3h0eEFkX2JDQ3pzTXdJRURCYnVxUnM5d2ZYUXhLZFVueV9naVBOUUs4LTRSNm9VYXB2MVh6WVpLMjREZTc1amRYSTI3dGlqWm5RTFVfbjhxTmdQVU9XQmtVeXAtMkVLMWpZZFJNa003MHYyZWFKbkRDYndzZUdWTTVDY0xNbmJZWG9YOWV5MUFZNTJaQktBYUdtbnVIMzVoRUk3Qm4xcG1WUjVUUHFVNjJYUlgyQ05EUjBlUEl0Qk9ySlVndVFaNXpFaUVqakE0OG5DSC12QU0tQVdOTGtnaE1hbGZUdk9kUkdtejVrSDRNZXFnNnFCWFZnamE4THlMWmY3TTY4aDdhSHJINThlVGZzMm51RWtKTVE=/https/tryhcpforcloudscale.hitachivantara.com:443/quay311/datastorage/registry/sha256/d3/d3deabf2a506ef6f5fa7c2a68bf27047574cef9908b30a97ff2d01ae539b089a?AWSAccessKeyId=ASUW60_nBCPs2yN2Eth4MvQXECNAxcpwt3wTbosIa7RXcqZskXDFNwEHIxCPteZXrnrurcZjmot97-k&Signature=SXr0CHdUTRVHRvjlw6XDX2%2Faork%3D&Expires=1721904300

              rhn-support-milang Michaela Lang
              lzha1981 luffy zhang
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: