Investigate: Limit access to this project not working as expected when coping from one repository to another
Summary
I can`t get the allowlist to work for a copy between 2 repositories. If I use my account password , I can transfer fine. But not inside the runner with the $CI_JOB_TOKEN. It looks liek ther CI_JOB_TOKEN not has the perssions to use every aspect of the API. I included error output from the command that ran inside the runner.
FAIL with CI_JOB_TOKEN of xrow-shared/developer-operator:
skopeo copy docker://registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4 docker://registry.gitlab.com/xrow-public/repository/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4
User Stories
As a developer, I want to push a container from a private repo to a public repo so that I can release it properly to my demands.
Please try to include one user story for the main persona who needs this feature. -->
Proposal
If I add some project to the allow list it shall be able to copy containers to the other.
Additional details
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo copy docker://registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4 docker://registry.gitlab.com/xrow-public/repository/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4
Getting image source signatures
ERRO[0002] Failed to parse the authentication scope from the given challenge challenge="{bearer map[error:insufficient_scope realm:https://gitlab.com/jwt/auth scope:repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull service:container_registry]}" error="error parsing auth scope: 'repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull'" scope="repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull"
ERRO[0002] Failed to parse the authentication scope from the given challenge challenge="{bearer map[error:insufficient_scope realm:https://gitlab.com/jwt/auth scope:repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull service:container_registry]}" error="error parsing auth scope: 'repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull'" scope="repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull"
Copying blob 281daec7d80e [--------------------------------------] 0.0b / 34.3MiB
Copying blob f4a3c904e556 [--------------------------------------] 0.0b / 37.5MiB
ERRO[0002] Failed to parse the authentication scope from the given challenge challenge="{bearer map[error:insufficient_scope realm:https://gitlab.com/jwt/auth scope:repository:xrow-shared/developer-operator/developer-operator-controller:pull repository:xrow-p
Copying blob 281daec7d80e [--------------------------------------] 8.0b / 34.3MiB
Copying blob f4a3c904e556 [--------------------------------------] 8.0b / 37.5MiB
Copying blob 1dc2d7c19e24 [--------------------------------------] 0.0b / 398.0b
ERRO[0003] Failed to parse the authentication scope from the given challenge challenge="{bearer map[error:insufficient_scope realm:https://gitlab.com/jwt/auth scope:repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull service:container_registry]}" error="error parsing auth scope: 'repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull'" scope="repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull"
Copying blob 281daec7d80e [--------------------------------------] 8.0b / 34.3MiB
Copying blob f4a3c904e556 [--------------------------------------] 8.0b / 37.5MiB
Copying blob 1dc2d7c19e24 [>-------------------------------------] 8.0b / 398.0b
Copying blob 83cf79a1a8da [==>-----------------------------------] 8.0b / 120.0b
Copying blob 18e9d88b0696 [--------------------------------------] 8.0b / 22.6KiB
FATA[0003] writing blob: initiating layer upload to /v2/xrow-public/repository/developer-operator-controller/blobs/uploads/ in registry.gitlab.com: requested access to the resource is denied
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo copy docker://registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4 docker://registry.gitlab.com/xrow-public/repository/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4 --debug
DEBU[0000] Using registries.d directory /etc/containers/registries.d
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf"
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf.d/000-shortnames.conf"
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf.d/001-rhel-shortnames.conf"
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf.d/002-rhel-shortnames-overrides.conf"
DEBU[0000] Found credentials for registry.gitlab.com/xrow-public/repository/developer-operator-controller in credential helper containers-auth.json in file /run/containers/0/auth.json
DEBU[0000] No signature storage configuration found for registry.gitlab.com/xrow-public/repository/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4, using built-in default file:///var/lib/containers/sigstore
DEBU[0000] Looking for TLS certificates and private keys in /etc/docker/certs.d/registry.gitlab.com
DEBU[0000] Using registries.d directory /etc/containers/registries.d
DEBU[0000] Trying to access "registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4"
DEBU[0000] Found credentials for registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller in credential helper containers-auth.json in file /run/containers/0/auth.json
DEBU[0000] No signature storage configuration found for registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4, using built-in default file:///var/lib/containers/sigstore
DEBU[0000] Looking for TLS certificates and private keys in /etc/docker/certs.d/registry.gitlab.com
DEBU[0000] GET https://registry.gitlab.com/v2/
DEBU[0000] Ping https://registry.gitlab.com/v2/ status 401
DEBU[0000] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller%3Apull&service=container_registry
DEBU[0000] Increasing token expiration to: 60 seconds
DEBU[0000] GET https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/manifests/64b5bfd77b036bbbf956586db4395d05fcdccdb4
DEBU[0001] Content-Type from manifest GET is "application/vnd.oci.image.manifest.v1+json"
DEBU[0001] Using blob info cache at /var/lib/containers/cache/blob-info-cache-v1.boltdb
DEBU[0001] IsRunningImageAllowed for image docker:registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4
DEBU[0001] Using default policy section
DEBU[0001] Requirement 0: allowed
DEBU[0001] Overall: allowed
Getting image source signatures
DEBU[0001] Reading /var/lib/containers/sigstore/xrow-shared/developer-operator/developer-operator-controller@sha256=2031263dc54997112cbc2687390e3ec3e3ef999311e5e32dfe5f4fc83bfc04d2/signature-1
DEBU[0001] Not looking for sigstore attachments: disabled by configuration
DEBU[0001] Manifest has MIME type application/vnd.oci.image.manifest.v1+json, ordered candidate list [application/vnd.oci.image.manifest.v1+json, application/vnd.docker.distribution.manifest.v2+json, application/vnd.docker.distribution.manifest.v1+prettyjws, application/vnd.oci.image.index.v1+json, application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.docker.distribution.manifest.v1+json]
DEBU[0001] ... will first try using the original manifest unmodified
DEBU[0001] Checking if we can reuse blob sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5: general substitution = true, compression for MIME type "application/vnd.oci.image.layer.v1.tar+gzip" = true
DEBU[0001] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
DEBU[0001] GET https://registry.gitlab.com/v2/
DEBU[0001] Checking if we can reuse blob sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5: general substitution = true, compression for MIME type "application/vnd.oci.image.layer.v1.tar+gzip" = true
DEBU[0001] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
DEBU[0001] Checking if we can reuse blob sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883: general substitution = true, compression for MIME type "application/vnd.oci.image.layer.v1.tar+gzip" = true
DEBU[0001] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
DEBU[0001] Checking if we can reuse blob sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c: general substitution = true, compression for MIME type "application/vnd.oci.image.layer.v1.tar+gzip" = true
DEBU[0001] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c
DEBU[0001] Checking if we can reuse blob sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24: general substitution = true, compression for MIME type "application/vnd.oci.image.layer.v1.tar+gzip" = true
DEBU[0001] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24
DEBU[0001] Ping https://registry.gitlab.com/v2/ status 401
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&service=container_registry
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&service=container_registry
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&service=container_registry
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&service=container_registry
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&service=container_registry
DEBU[0001] Increasing token expiration to: 60 seconds
DEBU[0001] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c
DEBU[0001] Increasing token expiration to: 60 seconds
DEBU[0001] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
DEBU[0001] Increasing token expiration to: 60 seconds
DEBU[0001] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
DEBU[0001] Increasing token expiration to: 60 seconds
DEBU[0001] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24
DEBU[0001] Increasing token expiration to: 60 seconds
DEBU[0001] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
DEBU[0001] ... not present
DEBU[0001] Trying to reuse cached location sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c compressed with gzip in registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller
DEBU[0001] Checking /v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&scope=repository%3Axrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller%3Apull&service=container_registry
DEBU[0001] ... not present
DEBU[0001] Trying to reuse cached location sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5 compressed with gzip in registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller
DEBU[0001] Checking /v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&scope=repository%3Axrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller%3Apull&service=container_registry
DEBU[0001] ... not present
DEBU[0001] Trying to reuse cached location sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883 compressed with gzip in registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller
DEBU[0001] Checking /v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&scope=repository%3Axrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller%3Apull&service=container_registry
DEBU[0002] ... not present
DEBU[0002] Trying to reuse cached location sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24 compressed with gzip in registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller
DEBU[0002] Checking /v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24
DEBU[0002] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&scope=repository%3Axrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller%3Apull&service=container_registry
DEBU[0002] ... not present
DEBU[0002] Trying to reuse cached location sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5 compressed with gzip in registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller
DEBU[0002] Checking /v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
DEBU[0002] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&scope=repository%3Axrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller%3Apull&service=container_registry
DEBU[0002] Increasing token expiration to: 60 seconds
DEBU[0002] HEAD https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c
DEBU[0002] Increasing token expiration to: 60 seconds
DEBU[0002] HEAD https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
DEBU[0002] Increasing token expiration to: 60 seconds
DEBU[0002] HEAD https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
DEBU[0002] Increasing token expiration to: 60 seconds
DEBU[0002] HEAD https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24
DEBU[0002] Increasing token expiration to: 60 seconds
DEBU[0002] HEAD https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
DEBU[0002] ... already exists
DEBU[0002] Trying to mount /v2/xrow-public/repository/developer-operator-controller/blobs/uploads/?from=xrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller&mount=sha256%3A83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c
DEBU[0002] POST https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/uploads/?from=xrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller&mount=sha256%3A83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c
DEBU[0002] ... already exists
DEBU[0002] Trying to mount /v2/xrow-public/repository/developer-operator-controller/blobs/uploads/?from=xrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller&mount=sha256%3A1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
DEBU[0002] POST https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/uploads/?from=xrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller&mount=sha256%3A1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
DEBU[0002] ... already exists
DEBU[0002] Trying to mount /v2/xrow-public/repository/developer-operator-controller/blobs/uploads/?from=xrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller&mount=sha256%3A281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
DEBU[0002] POST https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/uploads/?from=xrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller&mount=sha256%3A281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
DEBU[0002] ... already exists
DEBU[0002] Trying to mount /v2/xrow-public/repository/developer-operator-controller/blobs/uploads/?from=xrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller&mount=sha256%3Af4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24
DEBU[0002] POST https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/uploads/?from=xrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller&mount=sha256%3Af4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24
DEBU[0002] ... already exists
DEBU[0002] Trying to mount /v2/xrow-public/repository/developer-operator-controller/blobs/uploads/?from=xrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller&mount=sha256%3A18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
DEBU[0002] POST https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/uploads/?from=xrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller&mount=sha256%3A18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
ERRO[0002] Failed to parse the authentication scope from the given challenge challenge="{bearer map[error:insufficient_scope realm:https://gitlab.com/jwt/auth scope:repository:xrow-shared/developer-operator/developer-operator-controller:pull repository:xrow-public/repository/developer-operator-controller:pull,push service:container_registry]}" error="error parsing auth scope: 'repository:xrow-shared/developer-operator/developer-operator-controller:pull repository:xrow-public/repository/developer-operator-controller:pull,push'" scope="repository:xrow-shared/developer-operator/developer-operator-controller:pull repository:xrow-public/repository/developer-operator-controller:pull,push"
DEBU[0002] Error mounting, response http.Response{Status:"401 Unauthorized", StatusCode:401, Proto:"HTTP/1.1", ProtoMajor:1, ProtoMinor:1, Header:http.Header{"Content-Length":[]string{"476"}, "Content-Type":[]string{"application/json"}, "Date":[]string{"Sat, 02 Mar 2024 02:48:44 GMT"}, "Docker-Distribution-Api-Version":[]string{"registry/2.0"}, "Gitlab-Lb":[]string{"haproxy-registry-04-lb-gprd"}, "Gitlab-Sv":[]string{"registry-us-east1-c"}, "Www-Authenticate":[]string{"Bearer realm=\"https://gitlab.com/jwt/auth\",service=\"container_registry\",scope=\"repository:xrow-shared/developer-operator/developer-operator-controller:pull repository:xrow-public/repository/developer-operator-controller:pull,push\",error=\"insufficient_scope\""}, "X-Content-Type-Options":[]string{"nosniff"}}, Body:(*http.bodyEOFSignal)(0xc000342040), ContentLength:476, TransferEncoding:[]string(nil), Close:false, Uncompressed:false, Trailer:http.Header(nil), Request:(*http.Request)(0xc0000dc800), TLS:(*tls.ConnectionState)(0xc000576790)}
DEBU[0002] Discarding non-primary errors:
DEBU[0002] unauthorized: authentication required
DEBU[0002] ... Mount failed: mounting sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c from registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller to registry.gitlab.com/xrow-public/repository/developer-operator-controller: requested access to the resource is denied
DEBU[0002] Downloading /v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c
DEBU[0002] GET https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c
ERRO[0002] Failed to parse the authentication scope from the given challenge challenge="{bearer map[error:insufficient_scope realm:https://gitlab.com/jwt/auth scope:repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull service:container_registry]}" error="error parsing auth scope: 'repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull'" scope="repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull"
DEBU[0002] Error mounting, response http.Response{Status:"401 Unauthorized", StatusCode:401, Proto:"HTTP/1.1", ProtoMajor:1, ProtoMinor:1, Header:http.Header{"Content-Length":[]string{"476"}, "Content-Type":[]string{"application/json"}, "Date":[]string{"Sat, 02 Mar 2024 02:48:44 GMT"}, "Docker-Distribution-Api-Version":[]string{"registry/2.0"}, "Gitlab-Lb":[]string{"haproxy-registry-03-lb-gprd"}, "Gitlab-Sv":[]string{"registry-us-east1-b"}, "Www-Authenticate":[]string{"Bearer realm=\"https://gitlab.com/jwt/auth\",service=\"container_registry\",scope=\"repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull\",error=\"insufficient_scope\""}, "X-Content-Type-Options":[]string{"nosniff"}}, Body:(*http.bodyEOFSignal)(0xc000d5e100), ContentLength:476, TransferEncoding:[]string(nil), Close:false, Uncompressed:false, Trailer:http.Header(nil), Request:(*http.Request)(0xc00067e200), TLS:(*tls.ConnectionState)(0xc000dc0160)}
DEBU[0002] Discarding non-primary errors:
DEBU[0002] unauthorized: authentication required
DEBU[0002] ... Mount failed: mounting sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5 from registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller to registry.gitlab.com/xrow-public/repository/developer-operator-controller: requested access to the resource is denied
DEBU[0002] Downloading /v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
DEBU[0002] GET https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
ERRO[0002] Failed to parse the authentication scope from the given challenge challenge="{bearer map[error:insufficient_scope realm:https://gitlab.com/jwt/auth scope:repository:xrow-public/repository/developer-operator-controller:push,pull repository:xrow-shared/developer-operator/developer-operator-controller:pull service:container_registry]}" error="error parsing auth scope: 'repository:xrow-public/repository/developer-operator-controller:push,pull repository:xrow-shared/developer-operator/developer-operator-controller:pull'" scope="repository:xrow-public/repository/developer-operator-controller:push,pull repository:xrow-shared/developer-operator/developer-operator-controller:pull"
DEBU[0002] Error mounting, response http.Response{Status:"401 Unauthorized", StatusCode:401, Proto:"HTTP/1.1", ProtoMajor:1, ProtoMinor:1, Header:http.Header{"Content-Length":[]string{"476"}, "Content-Type":[]string{"application/json"}, "Date":[]string{"Sat, 02 Mar 2024 02:48:44 GMT"}, "Docker-Distribution-Api-Version":[]string{"registry/2.0"}, "Gitlab-Lb":[]string{"haproxy-registry-02-lb-gprd"}, "Gitlab-Sv":[]string{"registry-us-east1-d"}, "Www-Authenticate":[]string{"Bearer realm=\"https://gitlab.com/jwt/auth\",service=\"container_registry\",scope=\"repository:xrow-public/repository/developer-operator-controller:push,pull repository:xrow-shared/developer-operator/developer-operator-controller:pull\",error=\"insufficient_scope\""}, "X-Content-Type-Options":[]string{"nosniff"}}, Body:(*http.bodyEOFSignal)(0xc000d5e4c0), ContentLength:476, TransferEncoding:[]string(nil), Close:false, Uncompressed:false, Trailer:http.Header(nil), Request:(*http.Request)(0xc00095e000), TLS:(*tls.ConnectionState)(0xc000ae40b0)}
DEBU[0002] Discarding non-primary errors:
DEBU[0002] unauthorized: authentication required
DEBU[0002] ... Mount failed: mounting sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883 from registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller to registry.gitlab.com/xrow-public/repository/developer-operator-controller: requested access to the resource is denied
DEBU[0002] Downloading /v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
DEBU[0002] GET https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
ERRO[0002] Failed to parse the authentication scope from the given challenge challenge="{bearer map[error:insufficient_scope realm:https://gitlab.com/jwt/auth scope:repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull service:container_registry]}" error="error parsing auth scope: 'repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull'" scope="repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull"
DEBU[0002] Error mounting, response http.Response{Status:"401 Unauthorized", StatusCode:401, Proto:"HTTP/1.1", ProtoMajor:1, ProtoMinor:1, Header:http.Header{"Content-Length":[]string{"476"}, "Content-Type":[]string{"application/json"}, "Date":[]string{"Sat, 02 Mar 2024 02:48:44 GMT"}, "Docker-Distribution-Api-Version":[]string{"registry/2.0"}, "Gitlab-Lb":[]string{"haproxy-registry-03-lb-gprd"}, "Gitlab-Sv":[]string{"registry-us-east1-b"}, "Www-Authenticate":[]string{"Bearer realm=\"https://gitlab.com/jwt/auth\",service=\"container_registry\",scope=\"repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull\",error=\"insufficient_scope\""}, "X-Content-Type-Options":[]string{"nosniff"}}, Body:(*http.bodyEOFSignal)(0xc000d5e580), ContentLength:476, TransferEncoding:[]string(nil), Close:false, Uncompressed:false, Trailer:http.Header(nil), Request:(*http.Request)(0xc000742000), TLS:(*tls.ConnectionState)(0xc00075e0b0)}
DEBU[0002] Discarding non-primary errors:
DEBU[0002] unauthorized: authentication required
DEBU[0002] ... Mount failed: mounting sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24 from registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller to registry.gitlab.com/xrow-public/repository/developer-operator-controller: requested access to the resource is denied
DEBU[0002] Downloading /v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24
DEBU[0002] GET https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24
ERRO[0002] Failed to parse the authentication scope from the given challenge challenge="{bearer map[error:insufficient_scope realm:https://gitlab.com/jwt/auth scope:repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull service:container_registry]}" error="error parsing auth scope: 'repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull'" scope="repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull"
DEBU[0002] Error mounting, response http.Response{Status:"401 Unauthorized", StatusCode:401, Proto:"HTTP/1.1", ProtoMajor:1, ProtoMinor:1, Header:http.Header{"Content-Length":[]string{"476"}, "Content-Type":[]string{"application/json"}, "Date":[]string{"Sat, 02 Mar 2024 02:48:44 GMT"}, "Docker-Distribution-Api-Version":[]string{"registry/2.0"}, "Gitlab-Lb":[]string{"haproxy-registry-04-lb-gprd"}, "Gitlab-Sv":[]string{"registry-us-east1-c"}, "Www-Authenticate":[]string{"Bearer realm=\"https://gitlab.com/jwt/auth\",service=\"container_registry\",scope=\"repository:xrow-public/repository/developer-operator-controller:pull,push repository:xrow-shared/developer-operator/developer-operator-controller:pull\",error=\"insufficient_scope\""}, "X-Content-Type-Options":[]string{"nosniff"}}, Body:(*http.bodyEOFSignal)(0xc000d5ea00), ContentLength:476, TransferEncoding:[]string(nil), Close:false, Uncompressed:false, Trailer:http.Header(nil), Request:(*http.Request)(0xc00095e100), TLS:(*tls.ConnectionState)(0xc000576790)}
DEBU[0002] Discarding non-primary errors:
DEBU[0002] unauthorized: authentication required
DEBU[0002] ... Mount failed: mounting sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5 from registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller to registry.gitlab.com/xrow-public/repository/developer-operator-controller: requested access to the resource is denied
DEBU[0002] Downloading /v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
DEBU[0002] GET https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
Copying blob 83cf79a1a8da [--------------------------------------] 0.0b / 120.0b
Copying blob 1dc2d7c19e24 [--------------------------------------] 0.0b / 398.0b
Copying blob 281daec7d80e [--------------------------------------] 0.0b / 34.3MiB
Copying blob f4a3c904e556 [--------------------------------------] 0.0b / 37.5MiB
Copying blob 18e9d88b0696 [--------------------------------------] 0.0b / 22.6KiB
DEBU[0002] Detected compression format gzip
DEBU[0002] Using original blob without modification
Copying blob 83cf79a1a8da [==>-----------------------------------] 8.0b / 120.0b
Copying blob 1dc2d7c19e24 [--------------------------------------] 0.0b / 398.0b
Copying blob 281daec7d80e [--------------------------------------] 0.0b / 34.3MiB
Copying blob f4a3c904e556 [--------------------------------------] 0.0b / 37.5MiB
Copying blob 18e9d88b0696 [--------------------------------------] 0.0b / 22.6KiB
DEBU[0002] Detected compression format gzip
DEBU[0002] Using original blob without modification
DEBU[0002] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
DEBU[0002] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
DEBU[0002] Detected insufficient_scope error, will retry request with updated scope
DEBU[0002] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&service=container_registry
DEBU[0002] Detected compression format gzip
DEBU[0002] Using original blob without modification
DEBU[0002] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
DEBU[0002] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
DEBU[0003] ... not present
DEBU[0003] Uploading /v2/xrow-public/repository/developer-operator-controller/blobs/uploads/
Copying blob 83cf79a1a8da [==>-----------------------------------] 8.0b / 120.0b
Copying blob 1dc2d7c19e24 [>-------------------------------------] 8.0b / 398.0b
Copying blob 281daec7d80e [--------------------------------------] 8.0b / 34.3MiB
Copying blob f4a3c904e556 [--------------------------------------] 8.0b / 37.5MiB
Copying blob 18e9d88b0696 [--------------------------------------] 0.0b / 22.6KiB
DEBU[0003] Detected compression format gzip
DEBU[0003] Using original blob without modification
DEBU[0003] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
DEBU[0003] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
Copying blob 83cf79a1a8da [==>-----------------------------------] 8.0b / 120.0b
Copying blob 1dc2d7c19e24 [>-------------------------------------] 8.0b / 398.0b
Copying blob 281daec7d80e [--------------------------------------] 8.0b / 34.3MiB
Copying blob f4a3c904e556 [--------------------------------------] 8.0b / 37.5MiB
Copying blob 18e9d88b0696 [--------------------------------------] 8.0b / 22.6KiB
DEBU[0003] Detected insufficient_scope error, will retry request with updated scope
DEBU[0003] POST https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/uploads/
DEBU[0003] ... not present
Copying blob 83cf79a1a8da [==>-----------------------------------] 8.0b / 120.0b
Copying blob 1dc2d7c19e24 [>-------------------------------------] 8.0b / 398.0b
Copying blob 281daec7d80e [--------------------------------------] 8.0b / 34.3MiB
Copying blob f4a3c904e556 [--------------------------------------] 8.0b / 37.5MiB
Copying blob 18e9d88b0696 [--------------------------------------] 8.0b / 22.6KiB
DEBU[0003] Detected insufficient_scope error, will retry request with updated scope
DEBU[0003] POST https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/uploads/
DEBU[0003] Error initiating layer upload, response http.Response{Status:"401 Unauthorized", StatusCode:401, Proto:"HTTP/1.1", ProtoMajor:1, ProtoMinor:1, Header:http.Header{"Content-Length":[]string{"340"}, "Content-Type":[]string{"application/json"}, "Date":[]string{"Sat, 02 Mar 2024 02:48:45 GMT"}, "Docker-Distribution-Api-Version":[]string{"registry/2.0"}, "Gitlab-Lb":[]string{"haproxy-registry-01-lb-gprd"}, "Gitlab-Sv":[]string{"registry-us-east1-c"}, "Www-Authenticate":[]string{"Bearer realm=\"https://gitlab.com/jwt/auth\",service=\"container_registry\",scope=\"repository:xrow-public/repository/developer-operator-controller:pull,push\",error=\"insufficient_scope\""}, "X-Content-Type-Options":[]string{"nosniff"}}, Body:(*http.bodyEOFSignal)(0xc000db2580), ContentLength:340, TransferEncoding:[]string(nil), Close:false, Uncompressed:false, Trailer:http.Header(nil), Request:(*http.Request)(0xc000742000), TLS:(*tls.ConnectionState)(0xc000dc0420)}
DEBU[0003] Discarding non-primary errors:
DEBU[0003] unauthorized: authentication required
DEBU[0003] Error initiating layer upload, response http.Response{Status:"401 Unauthorized", StatusCode:401, Proto:"HTTP/1.1", ProtoMajor:1, ProtoMinor:1, Header:http.Header{"Content-Length":[]string{"340"}, "Content-Type":[]string{"application/json"}, "Date":[]string{"Sat, 02 Mar 2024 02:48:45 GMT"}, "Docker-Distribution-Api-Version":[]string{"registry/2.0"}, "Gitlab-Lb":[]string{"haproxy-registry-01-lb-gprd"}, "Gitlab-Sv":[]string{"registry-us-east1-c"}, "Www-Authenticate":[]string{"Bearer realm=\"https://gitlab.com/jwt/auth\",service=\"container_registry\",scope=\"repository:xrow-public/repository/developer-operator-controller:pull,push\",error=\"insufficient_scope\""}, "X-Content-Type-Options":[]string{"nosniff"}}, Body:(*http.bodyEOFSignal)(0xc000ea4240), ContentLength:340, TransferEncoding:[]string(nil), Close:false, Uncompressed:false, Trailer:http.Header(nil), Request:(*http.Request)(0xc00057a600), TLS:(*tls.ConnectionState)(0xc0001a5e40)}
DEBU[0003] Discarding non-primary errors:
DEBU[0003] unauthorized: authentication required
Copying blob 83cf79a1a8da [==>-----------------------------------] 8.0b / 120.0b
Copying blob 1dc2d7c19e24 [>-------------------------------------] 8.0b / 398.0b
Copying blob 281daec7d80e [--------------------------------------] 8.0b / 34.3MiB
Copying blob f4a3c904e556 [--------------------------------------] 8.0b / 37.5MiB
Copying blob 18e9d88b0696 [--------------------------------------] 8.0b / 22.6KiB
DEBU[0003] Error initiating layer upload, response http.Response{Status:"401 Unauthorized", StatusCode:401, Proto:"HTTP/1.1", ProtoMajor:1, ProtoMinor:1, Header:http.Header{"Content-Length":[]string{"340"}, "Content-Type":[]string{"application/json"}, "Date":[]string{"Sat, 02 Mar 2024 02:48:45 GMT"}, "Docker-Distribution-Api-Version":[]string{"registry/2.0"}, "Gitlab-Lb":[]string{"haproxy-registry-03-lb-gprd"}, "Gitlab-Sv":[]string{"registry-us-east1-b"}, "Www-Authenticate":[]string{"Bearer realm=\"https://gitlab.com/jwt/auth\",service=\"container_registry\",scope=\"repository:xrow-public/repository/developer-operator-controller:pull,push\",error=\"insufficient_scope\""}, "X-Content-Type-Options":[]string{"nosniff"}}, Body:(*http.bodyEOFSignal)(0xc000062a80), ContentLength:340, TransferEncoding:[]string(nil), Close:false, Uncompressed:false, Trailer:http.Header(nil), Request:(*http.Request)(0xc00095e000), TLS:(*tls.ConnectionState)(0xc000ae4160)}
DEBU[0003] Discarding non-primary errors:
DEBU[0003] unauthorized: authentication required
DEBU[0003] Error initiating layer upload, response http.Response{Status:"401 Unauthorized", StatusCode:401, Proto:"HTTP/1.1", ProtoMajor:1, ProtoMinor:1, Header:http.Header{"Content-Length":[]string{"340"}, "Content-Type":[]string{"application/json"}, "Date":[]string{"Sat, 02 Mar 2024 02:48:45 GMT"}, "Docker-Distribution-Api-Version":[]string{"registry/2.0"}, "Gitlab-Lb":[]string{"haproxy-registry-01-lb-gprd"}, "Gitlab-Sv":[]string{"registry-us-east1-c"}, "Www-Authenticate":[]string{"Bearer realm=\"https://gitlab.com/jwt/auth\",service=\"container_registry\",scope=\"repository:xrow-public/repository/developer-operator-controller:pull,push\",error=\"insufficient_scope\""}, "X-Content-Type-Options":[]string{"nosniff"}}, Body:(*http.bodyEOFSignal)(0xc000db2940), ContentLen
Copying blob 83cf79a1a8da [==>-----------------------------------] 8.0b / 120.0b
Copying blob 1dc2d7c19e24 [>-------------------------------------] 8.0b / 398.0b
Copying blob 281daec7d80e [--------------------------------------] 8.0b / 34.3MiB
Copying blob f4a3c904e556 [--------------------------------------] 8.0b / 37.5MiB
Copying blob 18e9d88b0696 [--------------------------------------] 8.0b / 22.6KiB
DEBU[0003] Error initiating layer upload, response http.Response{Status:"401 Unauthorized", StatusCode:401, Proto:"HTTP/1.1", ProtoMajor:1, ProtoMinor:1, Header:http.Header{"Content-Length":[]string{"340"}, "Content-Type":[]string{"application/json"}, "Date":[
Copying blob 83cf79a1a8da [==>-----------------------------------] 8.0b / 120.0b
Copying blob 1dc2d7c19e24 [>-------------------------------------] 8.0b / 398.0b
Copying blob 281daec7d80e [--------------------------------------] 8.0b / 34.3MiB
Copying blob f4a3c904e556 [--------------------------------------] 8.0b / 37.5MiB
Copying blob 18e9d88b0696 [--------------------------------------] 8.0b / 22.6KiB
FATA[0003] writing blob: initiating layer upload to /v2/xrow-public/repository/developer-operator-controller/blobs/uploads/ in registry.gitlab.com: requested access to the resource is denied
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# ^C
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo logout
FATA[0000] please provide a registry to log out from
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo login -u bjoern@xrow.de -p RNmONwherATEnDinglYgOrULIncedLe registry.gitlab.com
Login Succeeded!
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo copy docker://registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4 docker://registry.gitlab.com/xrow-public/repository/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4
Getting image source signatures
Copying blob 281daec7d80e skipped: already exists
Copying blob 83cf79a1a8da skipped: already exists
Copying blob f4a3c904e556 skipped: already exists
Copying blob 18e9d88b0696 skipped: already exists
Copying blob 1dc2d7c19e24 skipped: already exists
Copying config ad7c83c541 done
Writing manifest to image destination
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo logout
FATA[0000] please provide a registry to log out from
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo login -u gitlab-ci-token -p glcbt-65_u8D7GrHhzx5txi61JheT registry.gitlab.com
Login Succeeded!
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo copy docker://registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4 docker://registry.gitlab.com/xrow-public/repository/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4
Getting image source signatures
Copying blob 281daec7d80e skipped: already exists
Copying blob 1dc2d7c19e24 skipped: already exists
Copying blob f4a3c904e556 skipped: already exists
Copying blob 18e9d88b0696 skipped: already exists
Copying blob 83cf79a1a8da skipped: already exists
Copying config ad7c83c541 done
Writing manifest to image destination
FATA[0002] writing manifest: uploading manifest 64b5bfd77b036bbbf956586db4395d05fcdccdb4 to registry.gitlab.com/xrow-public/repository/developer-operator-controller: requested access to the resource is denied
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo logout
FATA[0000] please provide a registry to log out from
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo logout registry.gitlab.com
Removed login credentials for registry.gitlab.com
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo login -u gitlab-ci-token -p glcbt-65_u8D7GrHhzx5txi61JheT registry.gitlab.com
Login Succeeded!
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo copy docker://registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4 docker://registry.gitlab.com/xrow-public/repository/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4
Getting image source signatures
Copying blob 18e9d88b0696 skipped: already exists
Copying blob f4a3c904e556 skipped: already exists
Copying blob 1dc2d7c19e24 skipped: already exists
Copying blob 83cf79a1a8da skipped: already exists
Copying blob 281daec7d80e skipped: already exists
Copying config ad7c83c541 done
Writing manifest to image destination
FATA[0002] writing manifest: uploading manifest 64b5bfd77b036bbbf956586db4395d05fcdccdb4 to registry.gitlab.com/xrow-public/repository/developer-operator-controller: requested access to the resource is denied
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]# skopeo copy docker://registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4 docker://registry.gitlab.com/xrow-public/repository/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4 --debug
DEBU[0000] Using registries.d directory /etc/containers/registries.d
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf"
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf.d/000-shortnames.conf"
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf.d/001-rhel-shortnames.conf"
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf.d/002-rhel-shortnames-overrides.conf"
DEBU[0000] Found credentials for registry.gitlab.com/xrow-public/repository/developer-operator-controller in credential helper containers-auth.json in file /run/containers/0/auth.json
DEBU[0000] No signature storage configuration found for registry.gitlab.com/xrow-public/repository/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4, using built-in default file:///var/lib/containers/sigstore
DEBU[0000] Looking for TLS certificates and private keys in /etc/docker/certs.d/registry.gitlab.com
DEBU[0000] Using registries.d directory /etc/containers/registries.d
DEBU[0000] Trying to access "registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4"
DEBU[0000] Found credentials for registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller in credential helper containers-auth.json in file /run/containers/0/auth.json
DEBU[0000] No signature storage configuration found for registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4, using built-in default file:///var/lib/containers/sigstore
DEBU[0000] Looking for TLS certificates and private keys in /etc/docker/certs.d/registry.gitlab.com
DEBU[0000] GET https://registry.gitlab.com/v2/
DEBU[0000] Ping https://registry.gitlab.com/v2/ status 401
DEBU[0000] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-shared%2Fdeveloper-operator%2Fdeveloper-operator-controller%3Apull&service=container_registry
DEBU[0000] Increasing token expiration to: 60 seconds
DEBU[0000] GET https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/manifests/64b5bfd77b036bbbf956586db4395d05fcdccdb4
DEBU[0001] Content-Type from manifest GET is "application/vnd.oci.image.manifest.v1+json"
DEBU[0001] Using blob info cache at /var/lib/containers/cache/blob-info-cache-v1.boltdb
DEBU[0001] IsRunningImageAllowed for image docker:registry.gitlab.com/xrow-shared/developer-operator/developer-operator-controller:64b5bfd77b036bbbf956586db4395d05fcdccdb4
DEBU[0001] Using default policy section
DEBU[0001] Requirement 0: allowed
DEBU[0001] Overall: allowed
Getting image source signatures
DEBU[0001] Reading /var/lib/containers/sigstore/xrow-shared/developer-operator/developer-operator-controller@sha256=2031263dc54997112cbc2687390e3ec3e3ef999311e5e32dfe5f4fc83bfc04d2/signature-1
DEBU[0001] Not looking for sigstore attachments: disabled by configuration
DEBU[0001] Manifest has MIME type application/vnd.oci.image.manifest.v1+json, ordered candidate list [application/vnd.oci.image.manifest.v1+json, application/vnd.docker.distribution.manifest.v2+json, application/vnd.docker.distribution.manifest.v1+prettyjws, application/vnd.oci.image.index.v1+json, application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.docker.distribution.manifest.v1+json]
DEBU[0001] ... will first try using the original manifest unmodified
DEBU[0001] Checking if we can reuse blob sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24: general substitution = true, compression for MIME type "application/vnd.oci.image.layer.v1.tar+gzip" = true
DEBU[0001] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24
DEBU[0001] GET https://registry.gitlab.com/v2/
DEBU[0001] Checking if we can reuse blob sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5: general substitution = true, compression for MIME type "application/vnd.oci.image.layer.v1.tar+gzip" = true
DEBU[0001] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
DEBU[0001] Checking if we can reuse blob sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5: general substitution = true, compression for MIME type "application/vnd.oci.image.layer.v1.tar+gzip" = true
DEBU[0001] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
DEBU[0001] Checking if we can reuse blob sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c: general substitution = true, compression for MIME type "application/vnd.oci.image.layer.v1.tar+gzip" = true
DEBU[0001] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c
DEBU[0001] Checking if we can reuse blob sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883: general substitution = true, compression for MIME type "application/vnd.oci.image.layer.v1.tar+gzip" = true
DEBU[0001] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
DEBU[0001] Ping https://registry.gitlab.com/v2/ status 401
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&service=container_registry
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&service=container_registry
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&service=container_registry
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&service=container_registry
DEBU[0001] GET https://gitlab.com/jwt/auth?account=gitlab-ci-token&scope=repository%3Axrow-public%2Frepository%2Fdeveloper-operator-controller%3Apull%2Cpush&service=container_registry
DEBU[0001] Increasing token expiration to: 60 seconds
DEBU[0001] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5
DEBU[0001] Increasing token expiration to: 60 seconds
DEBU[0001] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c
DEBU[0001] Increasing token expiration to: 60 seconds
DEBU[0001] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5
DEBU[0001] Increasing token expiration to: 60 seconds
DEBU[0001] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24
DEBU[0001] Increasing token expiration to: 60 seconds
DEBU[0001] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883
DEBU[0002] ... already exists
DEBU[0002] Skipping blob sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c (already present):
DEBU[0002] ... already exists
DEBU[0002] ... already exists
DEBU[0002] ... already exists
Copying blob 83cf79a1a8da skipped: already exists
DEBU[0002] Skipping blob sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5 (already present):
Copying blob 83cf79a1a8da skipped: already exists
Copying blob 83cf79a1a8da skipped: already exists
Copying blob 1dc2d7c19e24 skipped: already exists
Copying blob 83cf79a1a8da skipped: already exists
Copying blob 1dc2d7c19e24 skipped: already exists
Copying blob 18e9d88b0696 skipped: already exists
Copying blob f4a3c904e556 skipped: already exists
Copying blob 281daec7d80e skipped: already exists
DEBU[0002] Downloading /v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:ad7c83c54134c8182262e5f2376b6e2a8133c36254c8c64f080b0352a429064e
DEBU[0002] GET https://registry.gitlab.com/v2/xrow-shared/developer-operator/developer-operator-controller/blobs/sha256:ad7c83c54134c8182262e5f2376b6e2a8133c36254c8c64f080b0352a429064e
Copying config ad7c83c541 [--------------------------------------] 0.0b / 8.2KiB
DEBU[0002] No compression detected
DEBU[0002] Compression change for blob sha256:ad7c83c54134c8182262e5f2376b6e2a8133c36254c8c64f080b0352a429064e ("application/vnd.oci.image.config.v1+json") not supported
DEBU[0002] Using original blob without modification
DEBU[0002] Checking /v2/xrow-public/repository/developer-operator-controller/blobs/sha256:ad7c83c54134c8182262e5f2376b6e2a8133c36254c8c64f080b0352a429064e
DEBU[0002] HEAD https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/blobs/sha256:ad7c83c54134c8182262e5f2376b6e2a8133c36254c8c64f080b0352a429064e
Copying config ad7c83c541 done
Writing manifest to image destination
DEBU[0002] PUT https://registry.gitlab.com/v2/xrow-public/repository/developer-operator-controller/manifests/64b5bfd77b036bbbf956586db4395d05fcdccdb4
DEBU[0002] Discarding non-primary errors:
DEBU[0002] unauthorized: authentication required
DEBU[0002] Error uploading manifest 64b5bfd77b036bbbf956586db4395d05fcdccdb4 to registry.gitlab.com/xrow-public/repository/developer-operator-controller: requested access to the resource is denied while writing manifest "{\"schemaVersion\":2,\"mediaType\":\"application/vnd.oci.image.manifest.v1+json\",\"config\":{\"mediaType\":\"application/vnd.oci.image.config.v1+json\",\"digest\":\"sha256:ad7c83c54134c8182262e5f2376b6e2a8133c36254c8c64f080b0352a429064e\",\"size\":8359},\"layers\":[{\"mediaType\":\"application/vnd.oci.image.layer.v1.tar+gzip\",\"digest\":\"sha256:f4a3c904e5565efee16dbcb82838bbb64a39f8261e4531648bc591c528236c24\",\"size\":39341714},{\"mediaType\":\"application/vnd.oci.image.layer.v1.tar+gzip\",\"digest\":\"sha256:1dc2d7c19e24380502c78fee5a14177c58b031038487586b91482c22e4cacef5\",\"size\":398},{\"mediaType\":\"application/vnd.oci.image.layer.v1.tar+gzip\",\"digest\":\"sha256:83cf79a1a8da40e814fdf923e2b0b50f7f4f6e244401e901a6aac5f8fe05460c\",\"size\":120},{\"mediaType\":\"application/vnd.oci.image.layer.v1.tar+gzip\",\"digest\":\"sha256:281daec7d80e7d51f44e6777e71471c09a23f9994b08511f0c9eaf043edd8883\",\"size\":36013369},{\"mediaType\":\"application/vnd.oci.image.layer.v1.tar+gzip\",\"digest\":\"sha256:18e9d88b0696c1ac5d9e827dfb4e5f9b8db7202406d7ddff736d25028e8453e5\",\"size\":23150}],\"annotations\":{\"org.opencontainers.image.base.digest\":\"sha256:f66d81fb79b3edee3ac96e701d1cd08bd1bab673d364eafb505660e61538e0d5\",\"org.opencontainers.image.base.name\":\"quay.io/operator-framework/helm-operator:v1.33.0\"}}"
DEBU[0002] Writing manifest using preferred type application/vnd.oci.image.manifest.v1+json failed: writing manifest: uploading manifest 64b5bfd77b036bbbf956586db4395d05fcdccdb4 to registry.gitlab.com/xrow-public/repository/developer-operator-controller: requested access to the resource is denied
FATA[0002] writing manifest: uploading manifest 64b5bfd77b036bbbf956586db4395d05fcdccdb4 to registry.gitlab.com/xrow-public/repository/developer-operator-controller: requested access to the resource is denied
[root@runner-kyz44lfe-project-19271698-concurrent-0dcp8c workdir]#Some relevant technical details, if applicable, such as:
- Which tier(s) is this for?