Add troubleshooting entry on private container registries
Problem
When configuring DAST API/API Fuzzing, many times the user will deploy the target application using a services:
entry on the dast_api
job. If the customer is pulling from a private registry that requires authentication, the job will fail if they have not set authentication into a special CI variable.
Example customer issue: https://gitlab.slack.com/archives/CKWJP0ZS7/p1661371924147489
Article with solution: https://docs.gitlab.com/ee/ci/docker/using_docker_images.html#access-an-image-from-a-private-container-registry
Document this issue including a work around of adding the container to the projects gitlab registry if the authentication isn't possible for some reason. Also add search terms:
- Cloud provider names (Azure, Google Cloud (GCP), AWS, Digital Ocean)
- Failure string when unable to pull due to auth
- ???
Proposal
Keeping in mind that the focus is the show the user how to consume a goal is to show the user how to pull a a target image from registry that requires authorization.
- [-]
Set up a demo project within GitLab which exemplifies how to access a target image from a private Container Registry (one for API Fuzzing and one for DAST API) -
Update API Fuzzing and DAST API documentation to -
Include a link to the exampleAdded sample instead -
Include a section (or troubleshoot section) about how to handle this scenario -
Explain how to use the supported authentication method, link to example -
Explain the workaround about using GitLab registry
-
-
Include a list of requirements for the target.
-