Dokploy / Dokploy/dokploy

GitLab Container Registry push fails with dynamic image name (suffix) → insufficient_scope

Open
#4,293 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug needs-triage🔍
Dominant language
TypeScript
Stars
37.4k
Forks
3k
Avg merge
1d 3h
Merged PRs (30d)
73

Description

To Reproduce

When using Dokploy with GitLab Container Registry, image push fails due to Dokploy generating a dynamic image name with a random suffix that does not match an existing GitLab project path.

Dokploy builds and attempts to push an image like:

registry.gitlab.com//-

However, GitLab Container Registry only allows pushing to existing project paths, such as:

registry.gitlab.com//

As a result, the push fails with:

insufficient_scope: authorization failed

Logs
push access denied, repository does not exist or may require authorization
server message: insufficient_scope: authorization failed

OAuth request example:

scope=repository:/-:pull,push

Current vs. Expected behavior

Current Behavior

Dokploy automatically appends a random suffix to the image name during deployment:

-

The resulting image is pushed to:

registry.gitlab.com//-
GitLab Container Registry only allows pushing to existing project paths

Since this path does not exist as a GitLab project, the push fails with:

insufficient_scope: authorization failed
Expected Behavior
Dokploy should be compatible with GitLab Container Registry by:

Allowing explicit image name override:

registry.gitlab.com//
Making the random suffix optional or configurable
Ensuring the generated image name maps to an existing GitLab project path
With correct configuration:
Image push should succeed
No manual workaround (e.g., creating new projects for each deploy) should be required

Provide environment information
Dokploy version: v0.29.x
Registry: GitLab Container Registry
Registry URL: registry.gitlab.com
Authentication: Personal Access Token (api, read_registry, write_registry)
Which area(s) are affected? (Select all that apply)

Remote server

Are you deploying the applications where Dokploy is installed or on a remote server?

Same server where Dokploy is installed

Additional context

This issue makes GitLab Container Registry integration unreliable without workarounds. The problem is not related to authentication but to repository path mismatch.

Will you send a PR to fix it?

Maybe, need help

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by tracing where Dokploy generates the deployment image name and where the image is pushed to the configured registry. Reproduce the deployment against GitLab Container Registry, then verify that the configured or generated repository path matches an existing GitLab project and that the push succeeds without creating projects for each deployment.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, gitlab, typescript
Domain
devops
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.