Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-8205

[3.12] Quay 3.12.3 pull image was failed with 403 error code with Hitachi HCP V9.7

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Critical Critical
    • quay-v3.12.5
    • quay-v3.12.3
    • quay
    • False
    • None
    • False

      Description:

      This is an issue found in Quay 3.12.3, when using Hitachi HCP V9.7 as unmanaged Storage, pull image was failed with 403 error code and Clair report the same 403 error message, pls review this issue.

      Quay: 3.12.3

      Note: This issue is not existed with Hitachi HCP CS ENV

      podman pull quay3123hcpv97-quay-quay3123hcp97.apps.quaytest-3182.qe.azure.devcluster.openshift.com/quay/demo:ubuntu --tls-verify=false
      Trying to pull quay3123hcpv97-quay-quay3123hcp97.apps.quaytest-3182.qe.azure.devcluster.openshift.com/quay/demo:ubuntu...
      Error: parsing image configuration: fetching blob: StatusCode: 403, "<?xml version='1.0' encoding='UTF-8'?>\n<Error>\n  <..." 

      Quay Config.yaml:

      DEFAULT_TAG_EXPIRATION: 2w
      DISTRIBUTED_STORAGE_CONFIG:
        local_us:
        - RadosGWStorage
        - access_key: ***
          bucket_name: redhat
          hostname: partner.hcpdemo.hitachivantara.com
          is_secure: true
          secret_key: ***
          storage_path: /datastorage/registry
          signature_version: v4
      DISTRIBUTED_STORAGE_DEFAULT_LOCATIONS:
      - local_us
      DISTRIBUTED_STORAGE_PREFERENCE:
      - local_us
      PERMANENTLY_DELETE_TAGS: true
      RESET_CHILD_MANIFEST_EXPIRATION: true
      FEATURE_EXTENDED_REPOSITORY_NAMES: true
      CREATE_NAMESPACE_ON_PUSH: true
      FEATURE_QUOTA_MANAGEMENT: true
      FEATURE_PROXY_CACHE: true
      FEATURE_USER_INITIALIZE: true
      FEATURE_PROXY_STORAGE: true
      FEATURE_UI_V2: true
      FEATURE_SUPERUSERS_FULL_ACCESS: true
      FEATURE_AUTO_PRUNE: true 

      Clair Logs:

      {"level":"error","component":"indexer/controller/Controller.Index","request_id":"dd6441a00c382355","manifest":"sha256:0766d65bbcf5312ee6cd5a7a11033ae313fed3b404858f304d6f2442a58aa11b","state":"FetchLayers","error":"failed to fetch layers: fetcher: encountered errors: error realizing layer sha256:7e1a28b72dc3b60178fa8815ced5446ee5c5d7752c9cdbfd811d5665b021a259: fetcher: unexpected status code: 403 Forbidden (body starts: \"<?xml version='1.0' encoding='UTF-8'?>\\n<Error>\\n  <Code>AccessDenied</Code>\\n  <Message>Access Denied</Message>\\n  <RequestId>1728374506485</RequestId>\\n  <HostId>aGNwZGVtby5oaXRhY2hpdmFudGFyYS5jb206MTIw</HostId>\\n</Error>\\n\\n\")","time":"2024-10-08T08:01:46Z","message":"error during scan"} 

              Unassigned Unassigned
              lzha1981 luffy zhang
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated: