1
0
mirror of https://github.com/openshift/image-registry.git synced 2026-02-05 09:45:55 +01:00

892 Commits

Author SHA1 Message Date
openshift-merge-bot[bot]
d4cce000f7 Merge pull request #460 from ricardomaraschini/IR-350
IR-350: bump library-go to the latest version
2026-01-19 12:28:18 +00:00
Ricardo Maraschini
c2ca6fff66 chore: fix misguiding error message
the env variable name was wrong and we were showing the full env
variable and not the cipher where the validation fails.

this also replaces string.Split with strings.SplitSeq.
2026-01-15 17:51:29 +01:00
Ricardo Maraschini
94dae5f64f chore: address vet after bumping library-go
when we bump library-go the function diff.ObjectGoPrintDiff vanished. we
need to replace it with diff.ObjectGoPrintSideBySide on all test files.
2026-01-15 17:51:29 +01:00
Ricardo Maraschini
fcb7f1f970 IR-350: bump openshift/library-go
the ciphers validation process hass been completely refactored since the
previou version.
2026-01-15 17:26:34 +01:00
openshift-merge-bot[bot]
e6d1bf0d54 Merge pull request #459 from ricardomaraschini/ir-530
IR-350: fix cipher suite configuration conflict with docker distribution
2026-01-15 12:20:01 +00:00
Ricardo Maraschini
94bbf2c668 IR-350: fix cipher suite configuration conflict with docker distribution
docker distribution expects REGISTRY_HTTP_TLS_CIPHERSUITES as a json
array (e.g., '["a", "b"]'), while openshift image registry expects
comma-separated values (e.g., 'a,b'). setting this variable in the
openshift format causes the registry to crash during config parsing.

this change replaces REGISTRY_HTTP_TLS_CIPHERSUITES with
OPENSHIFT_REGISTRY_HTTP_TLS_CIPHERSUITES to use the comma-separated
format. Since the registry cannot start with the old variable set
incorrectly, there is no backward compatibility concern.
2026-01-14 18:21:33 +01:00
openshift-merge-bot[bot]
aa20986bae Merge pull request #457 from openshift-bot/art-consistency-openshift-4.22-openshift-enterprise-registry
OCPBUGS-69762: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.22
2025-12-19 07:36:58 +00:00
AOS Automation Release Team
825f3499c8 Updating openshift-enterprise-registry-container image to be consistent with ART for 4.22
Reconciling with 087d1930e3/images/openshift-enterprise-registry.yml
2025-12-18 08:48:06 +00:00
openshift-merge-bot[bot]
602f51c795 Merge pull request #455 from sandeepknd/ote-image-rg
CNTRLPLANE-1684: set up openshift-tests-extension for image-registry: refactor: simplified single-module OTE infrastructure
2025-12-01 13:18:04 +00:00
sandeepknd
6bf382ff1c updated the Dependency
fix the go-verify tests
2025-11-26 00:12:50 +05:30
sandeepknd
f5dec99c6b added OTE infrastructure code changes only 2025-11-25 23:04:52 +05:30
openshift-merge-bot[bot]
21af80e2a0 Merge pull request #450 from rwsu/AGENT-1311
AGENT-1311: Add support for distribution/distribution registry binary
2025-11-17 11:52:29 +00:00
Richard Su
5ffb8b076b Add config.yaml and distribution binary for generic registry
This adds configuration and binary support for the generic registry. The container
image now supports two registry modes:

1. **dockerregistry** (default): OpenShift-integrated registry with authentication,
   quotas, mirroring, and cluster integration. Uses /config.yml configuration.

2. **distribution**: Generic distribution/distribution registry for standalone use cases
   without OpenShift-specific features. Uses /etc/registry/config.yaml configuration.

The generic registry configuration is sourced from:
https://github.com/openshift/appliance/blob/master/registry/config.yml

This provides flexibility to run the same container image either as an
OpenShift-integrated registry or as a standalone generic registry depending
on which binary and configuration are used.

To use the generic registry:
  podman run -e REGISTRY_CONFIGURATION_PATH=/etc/registry/config.yaml <image> /usr/bin/distribution

Assisted-by: Claude <noreply@anthropic.com>
2025-11-04 16:38:30 -06:00
Zane Bitter
e721820aa0 Add generic registry binary to container 2025-11-03 14:26:47 -06:00
openshift-merge-bot[bot]
de5c64151f Merge pull request #448 from openshift-bot/art-consistency-openshift-4.21-openshift-enterprise-registry
OCPBUGS-62576: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.21
2025-10-17 12:56:32 +00:00
openshift-merge-bot[bot]
a6bab654da Merge pull request #447 from flavianmissi/update-owners-main
OCPBUGS-60845: update OWNERS
2025-09-12 07:40:44 +00:00
AOS Automation Release Team
ed6f85e6fe Updating openshift-enterprise-registry-container image to be consistent with ART for 4.21
Reconciling with 1097a63a57/images/openshift-enterprise-registry.yml
2025-09-12 00:54:16 +00:00
Flavian Missi
9a404a0e8b update OWNERS 2025-08-25 14:52:36 +02:00
openshift-merge-bot[bot]
887533765e Merge pull request #439 from shiftstack/OSASINFRA-3756-v3token-support
OSASINFRA-3756: Bump docker-distribution to support v3token authentication for swift
2025-08-07 02:13:27 +00:00
dkokkino
8684bf1628 Bump docker-distribution to support v3token authentication for swift 2025-07-30 15:04:11 +02:00
openshift-merge-bot[bot]
aa11fcc86e Merge pull request #435 from openshift-bot/art-consistency-openshift-4.20-openshift-enterprise-registry
OCPBUGS-57583: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.20
2025-06-24 01:36:29 +00:00
AOS Automation Release Team
f8b8b625e5 Updating openshift-enterprise-registry-container image to be consistent with ART for 4.20
Reconciling with dfb5c7d531/images/openshift-enterprise-registry.yml
2025-06-18 07:00:46 +00:00
openshift-merge-bot[bot]
b273498426 Merge pull request #427 from ricardomaraschini/OCPBUGS-56483
OCPBUGS-56483: bump jwt and oauth dependencies
2025-06-04 05:48:43 +00:00
Ricardo Maraschini
861d0d053d OCPBUGS-56483: bump jwt and oauth dependencies
This commit aims to mitigate two different CVEs in the following
packages:

- github.com/golang-jwt/jwt/v4 (CVE-2025-30204)
- golang.org/x/oauth2 (CVE-2025-22868)

We add two replaces here. Ideally these would be bumped in the
docker-distribution repository but at the current state we can't
easily cherry pick those from upstream.
2025-05-21 09:30:57 +02:00
openshift-merge-bot[bot]
59376a751c Merge pull request #425 from ricardomaraschini/disable-aws-region-check
IR-522: disable aws region check
2025-04-08 08:38:42 +00:00
Ricardo Maraschini
42ade8c7d9 IR-522: disable aws region check
disable the artificial aws region check. we are doing this so we can
support new aws regions without requiring patching the code every time.
2025-04-07 12:05:16 +02:00
openshift-merge-bot[bot]
1b1c80a924 Merge pull request #424 from ricardomaraschini/add-rmarasch-to-owners
NO-JIRA: chore: update owners file
2025-02-14 09:05:26 +00:00
Ricardo Maraschini
2dec23e130 chore: update owners file
this commits adds myself to the list of reviewers and approvers while
also removes dmage and adambkaplan (no longer part of the team).
2025-02-11 11:30:49 +01:00
openshift-merge-bot[bot]
3e7b124a03 Merge pull request #419 from ricardomaraschini/bump-docker-distribution
OCPBUGS-38874,OCPBUGS-25981: bump docker-distribution to add new regions
2025-01-31 04:32:35 +00:00
Ricardo Maraschini
1d1342e4f8 OCPBUGS-38874: bump docker-distribution to add new regions
bumping docker-distribution dependency as the new version includes a few
new regions.

this bump also includes the changes introduced by
https://github.com/openshift/docker-distribution/pull/44.
2025-01-20 12:42:11 +01:00
openshift-merge-bot[bot]
4e5150f56b Merge pull request #417 from openshift-bot/art-consistency-openshift-4.19-openshift-enterprise-registry
OCPBUGS-45414: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.19
2024-12-06 03:08:37 +00:00
AOS Automation Release Team
9bf645b3ab Updating openshift-enterprise-registry-container image to be consistent with ART for 4.19
Reconciling with 2ea3e6158c/images/openshift-enterprise-registry.yml
2024-12-04 03:56:38 +00:00
openshift-merge-bot[bot]
8def65e61f Merge pull request #415 from flavianmissi/IR-492
IR-492: metrics: document error codes
2024-10-24 17:28:49 +00:00
openshift-merge-bot[bot]
ececddac71 Merge pull request #414 from flavianmissi/OCPBUGS-39108
OCPBUGS-39108: bump docker distribution to fix purgeuploads panic
2024-10-24 03:05:17 +00:00
Flavian Missi
f9f8f66e1d bump docker distribution to fix purgeuploads panic 2024-10-23 14:31:24 +02:00
Flavian Missi
2026b6d81c metrics: document error codes 2024-10-21 15:10:02 +02:00
openshift-merge-bot[bot]
0d4541d90d Merge pull request #412 from flavianmissi/export-readonly-storage-metrics
IR-489: export storage read-only errors as metrics
2024-10-18 14:05:39 +00:00
Flavian Missi
c14ef8b7f5 metrics: report filesystem errors
to help customers detect and solve errors, we specifically report
metrics on a few filesystem specific errors.

we have seen customers configure the registry with a read-only
filesystem without noticing until it's too late. more specifically, when
using the registry only as a pull-through cache, a read-only filesystem
will be imperceptible to clients unless the upstream registry
experiences an outage, then it'll be too late to fix the cache.

the file too large (EFBIG) and device out of space (ENOSPC) errors were
added just in case. there have not been (so far) reports of customers
silently running into this errors on their PVCs.
2024-09-26 17:15:48 +02:00
Flavian Missi
8317f5e28b metrics: turn error codes into constants 2024-09-24 11:49:30 +02:00
openshift-merge-bot[bot]
cd7c61fdc8 Merge pull request #411 from openshift-bot/art-consistency-openshift-4.18-openshift-enterprise-registry
OCPBUGS-39498: Updating openshift-enterprise-registry-container image to be consistent with ART for 4.18
2024-09-05 08:17:15 +00:00
AOS Automation Release Team
fe65456522 Updating openshift-enterprise-registry-container image to be consistent with ART for 4.18
Reconciling with 827ab4ccce/images/openshift-enterprise-registry.yml
2024-09-04 05:58:14 +00:00
openshift-merge-bot[bot]
230afdee00 Merge pull request #408 from deepsm007/distribution
OCPBUGS-38085: pull upstream distribution changes to use a consistent multipart chunk size
2024-08-27 17:39:37 +00:00
Deep Mistry
20f0b13ba2 Update distribution changes, go mod tidy && go mod vendor 2024-08-26 10:17:37 -04:00
openshift-merge-bot[bot]
134be6f7c8 Merge pull request #407 from ashwindasr/rename-dockerfile
OCPBUGS-36521: Rename Dockerfile
2024-07-22 14:53:14 +00:00
Ashwin Das
fc924b1a38 Rename Dockerfile 2024-07-03 14:01:37 -04:00
openshift-merge-bot[bot]
f6ef41b02c Merge pull request #404 from flavianmissi/OCPBUGS-35335
OCPBUGS-35335: use SelfAccessReview to obtain user info
2024-06-17 12:51:09 +00:00
Flavian Missi
4fd4de64c6 pkg/dockerregistry/server/client: removed unused user interface
now that we rely on the SelfSubjectReview api to get user info, we no
longer need the openshfit specific user client.
2024-06-14 14:47:21 +02:00
Flavian Missi
018bd4544a pkg/dockerregistry/server: use SelfAccessReview api instead of users
the users api is specific to openshift, and is not available on every
openshift cluster, i.e when OIDC is configured with external users.
2024-06-14 14:43:41 +02:00
Flavian Missi
9a0f90d952 pkg/dockerregistry/server: gofumpt auth test file 2024-06-14 14:42:57 +02:00
Flavian Missi
dcdb89dbab go.*, vendor: bump openshift and k8s apis 2024-06-14 12:11:21 +02:00