Skip to content

Clarify support for S3 compatible services in container registry

João Pereira requested to merge jdrpereira-master-patch-72054 into master

What does this MR do?

Among others, the container registry supports S3 as the blob storage backend. In the last years, there has been a significant increase in so-called S3 compatible services, which reportedly implement APIs fully compliant with the AWS S3 specification.

Recently we have seen an increase in the container registry issues that are related to the use of such S3 compatible services, such as radosgw. Although most of the time we're able to help users and provide workarounds, we must not patch the registry unless the issue is reproducible against the reference S3 implementation from AWS.

This MR proposes the addition of a note to the container registry documentation, saying that we cannot guarantee support for S3 compatible services, neither we intend to patch the registry unless an issue is reproducible against AWS S3.

Screenshots

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Merge request reports