Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable default docker config provider #255

Merged
merged 2 commits into from
Sep 22, 2021

Conversation

DennisDenuto
Copy link
Contributor

@DennisDenuto DennisDenuto commented Sep 22, 2021

TODO:

@DennisDenuto DennisDenuto temporarily deployed to GCR e2e September 22, 2021 01:03 Inactive
@DennisDenuto DennisDenuto temporarily deployed to TanzuNet Registry Dev e2e September 22, 2021 01:03 Inactive
@DennisDenuto
Copy link
Contributor Author

DennisDenuto commented Sep 22, 2021

@cppforlife

FYI: There appears to be some incompatible changes made upstream (kubernetes) to auth providers. Not sure when / if those changes will eventually land on the fork we are using...

Specifically...

amazon-ecr is always enabled: https://github.com/kubernetes/kubernetes/blob/master/pkg/credentialprovider/aws/aws_credentials.go#L77-L80

And will return an empty dockerconfig if it is 'disabled': https://github.com/kubernetes/kubernetes/blob/master/pkg/credentialprovider/aws/aws_credentials.go#L173

This change will require changes on imgpkg, since we will treat that case as 'we found a cred for your image... try using an empty username / password'

- This interferes with the ordering of auth imgpkg uses.
-- Specifically, it will prefer the docker config.json file over the
auth cli flags.

- There doesn't seem to be a nice way to configure / turn this provider
off. Patching the vendor directory. Will try to make the change
upstream.

Authored-by: Dennis Leon <leonde@vmware.com>
Authored-by: Dennis Leon <leonde@vmware.com>
@DennisDenuto DennisDenuto force-pushed the disable-defaultDockerConfigProvider branch from 657abd0 to e8ca6f5 Compare September 22, 2021 16:55
@DennisDenuto DennisDenuto temporarily deployed to TanzuNet Registry Dev e2e September 22, 2021 16:55 Inactive
@DennisDenuto DennisDenuto temporarily deployed to GCR e2e September 22, 2021 16:55 Inactive
@DennisDenuto DennisDenuto marked this pull request as ready for review September 22, 2021 17:01
@cppforlife cppforlife merged commit 11acf73 into develop Sep 22, 2021
@DennisDenuto DennisDenuto deleted the disable-defaultDockerConfigProvider branch September 22, 2021 20:40
joaopapereira added a commit to carvel-dev/vendir that referenced this pull request Aug 22, 2022
Due to the inclusion of imgpkg as a library we need to ensure that the
change made in carvel-dev/imgpkg#255
stays in effect.
This will behavior can be removed when we complete the issue
carvel-dev/imgpkg#397

Signed-off-by: Joao Pereira <joaod@vmware.com>
joaopapereira added a commit to carvel-dev/vendir that referenced this pull request Aug 22, 2022
Due to the inclusion of imgpkg as a library we need to ensure that the
change made in carvel-dev/imgpkg#255
stays in effect.
This will behavior can be removed when we complete the issue
carvel-dev/imgpkg#397

Signed-off-by: Joao Pereira <joaod@vmware.com>
joaopapereira added a commit to carvel-dev/vendir that referenced this pull request Aug 22, 2022
Due to the inclusion of imgpkg as a library we need to ensure that the
change made in carvel-dev/imgpkg#255
stays in effect.
This will behavior can be removed when we complete the issue
carvel-dev/imgpkg#397

Signed-off-by: Joao Pereira <joaod@vmware.com>
joaopapereira added a commit to carvel-dev/vendir that referenced this pull request Aug 23, 2022
Due to the inclusion of imgpkg as a library we need to ensure that the
change made in carvel-dev/imgpkg#255
stays in effect.
This will behavior can be removed when we complete the issue
carvel-dev/imgpkg#397

Signed-off-by: Joao Pereira <joaod@vmware.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants