Comments (2)
We are also hitting this issue. Seems like it's linked to a recent change to Quay which must have just been rolled out to quay.io: quay/quay#2884
There is a small wrinkle though: as per the OCI spec, a client is still allowed to request an arbitrarily high number of tags to be returned in a single API call, which we so far silently ignored and returned the configured maximum. Now we return an HTTP 413 response, which technically is against the spec but needed in order to protect the registry against rogue clients and also return a clear error signal instead of less tags than the client asked for
So their limit always was 100 but was being silently ignored before, whereas now they throw an error.
Seems like there is already logic to set the current 1000 limit for non-Google registries, maybe this now needs a similar check for quay.io to set to n=100?
go-containerregistry/pkg/v1/google/list.go
Lines 98 to 102 in 1b4e407
Or ideally a way to specify the page size via the cli
from go-containerregistry.
It looks like quay fixed this on their end: fluxcd/image-reflector-controller#585 (comment)
from go-containerregistry.
Related Issues (20)
- ggcr: StartInterval field missing in HealthConfig struct
- ggcr: k8schain package depends on seemingly unmaintained ACR cred helper
- Nil pointer dereference
- ggcr: Image write concurrency errors
- crane: fails on Windows with "Error: cannot parse hash: "sha256\\0401ae60059d7270e280bdd6db0d3b91afcf5b34be7271d39c2af0253479257b""
- ggcr: Breaking change in `aws-sdk-go-v2` leads to broken dependencies in upstream projects
- crane: AWS ECR SHA mismatch when pushing image tar vs direct copy
- ggcr: Expected error when parsing name reference that is an Image ID
- ggcr: Docker with Containerd snapshotter gives wrong config name
- crane: incorrectly uses compressed layer of a cosign .sig file to write OCI image from cache
- ggcr: registry: image manifests not persisted on disk when configured disk storage
- crane: does basic auth work with http (just for testing)?
- crane: In Windows versions, the tarball archive is not exported correctly
- question: Can the remote.Referrers function be updated to handle a 406 response when attempting a request against the referrers API endpoint? HOT 1
- ggcr: k8schain not using AWS IRSA credentials for ECR auth
- question: Why is the output of crane pull --format oci way too big
- ggcr: Manifest subject is removed by adding layers
- ggcr:Upgrade github.com/docker/docker v24.0.0 to new version
- crane: auth get doesn't work with default keychain on Mac M1 + Podman HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from go-containerregistry.