jetstack / jetstack/version-checker

[BUG/Question] MANIFEST_UNKNOWN while using selfhosted registry

Aperta
#318 1 commento 1 reazione 0 assegnatari Vedi su GitHub
bug enhancement help wanted image-accuracy
Lingua principale
Go
Stelle
778
Fork
82
Merge medio
2m
PR unite (30g)
3

Descrizione

I'm trying to connect your tool to our private registry (artifactory) with a docker-remote to dockerhub but it seems that we encounter errors like "MANIFEST_UNKNOWN"

## Expected behavior
Version of image should be displayed, but it is not

## Logs
```
time="2025-01-24T09:43:54Z" level=error msg="docker-remote.registry.domain.fr/v2/library/haproxy/manifests/1.6.13: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"The named manifest is not known to the registry.\",\"detail\":{\"manifest\":\"library/haproxy\"}}]}" client=docker-remote.registry.domain.fr
time="2025-01-24T09:43:57Z" level=error msg="docker-remote.registry.domain.fr/v2/library/haproxy/manifests/1.6.13-alpine: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"The named manifest is not known to the registry.\",\"detail\":{\"manifest\":\"library/haproxy\"}}]}" client=docker-remote.registry.domain.fr
time="2025-01-24T09:44:01Z" level=error msg="docker-remote.registry.domain.fr/v2/library/haproxy/manifests/1.6.14: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"The named manifest is not known to the registry.\",\"detail\":{\"manifest\":\"library/haproxy\"}}]}" client=docker-remote.registry.domain.fr
time="2025-01-24T09:44:07Z" level=error msg="docker-remote.registry.domain.fr/v2/library/haproxy/manifests/1.6.14-alpine: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"The named manifest is not known to the registry.\",\"detail\":{\"manifest\":\"library/haproxy\"}}]}" client=docker-remote.registry.domain.fr
time="2025-01-24T09:44:11Z" level=error msg="docker-remote.registry.domain.fr/v2/library/haproxy/manifests/1.6.15: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"The named manifest is not known to the registry.\",\"detail\":{\"manifest\":\"library/haproxy\"}}]}" client=docker-remote.registry.domain.fr
time="2025-01-24T09:44:14Z" level=error msg="docker-remote.registry.domain.fr/v2/library/haproxy/manifests/1.6.15-alpine: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"The named manifest is not known to the registry.\",\"detail\":{\"manifest\":\"library/haproxy\"}}]}" client=docker-remote.registry.domain.fr
time="2025-01-24T09:45:18Z" level=debug msg="removing deleted pod containers from metrics: miscellaneous/kgb-agent-28961856-vt5l7/kgb-agent" module=controller
time="2025-01-24T09:45:32Z" level=error msg="docker-remote.registry.domain.fr/v2/library/haproxy/manifests/1.7: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"The named manifest is not known to the registry.\",\"detail\":{\"manifest\":\"library/haproxy\"}}]}" client=docker-remote.registry.domain.fr
time="2025-01-24T09:45:42Z" level=error msg="error syncing 'argo-cd-redis-ha-haproxy-84c4877f96-fmqmp/argocd': failed to sync pod argocd/argo-cd-redis-ha-haproxy-84c4877f96-fmqmp: failed to check container image \"config-init\": failed to get tags from remote registry for \"docker-remote.registry.domain.fr/library/haproxy\": failed to get docker image: Get \"https://docker-remote.registry.domain.fr/v2/library/haproxy/tags/list?n=500\": context deadline exceeded (Client.Timeout exceeded while awaiting headers),failed to check container image \"install-oneagent\": failed to get tags from remote registry for \"docker-remote.registry.domain.fr/dynatrace/dynatrace-operator\": failed to get docker image: Get \"https://docker-remote.registry.domain.fr/v2/dynatrace/dynatrace-operator/manifests/1.0.0\": context deadline exceeded (Client.Timeout exceeded while awaiting headers),failed to check container image \"haproxy\": failed to get tags from remote registry for \"docker-remote.registry.domain.fr/library/haproxy\": failed to get docker image: Get \"https://docker-remote.registry.domain.fr/v2/library/haproxy/manifests/1.7-alpine\": context deadline exceeded (Client.Timeout exceeded while awaiting headers), requeuing" module=controller
time="2025-01-24T09:45:42Z" level=debug msg="processing container image" container=config-init module=controller name=argo-cd-redis-ha-server-1 namespace=argocd
time="2025-01-24T09:45:45Z" level=error msg="docker-remote.registry.domain.fr/v2/library/haproxy/manifests/1: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"The named manifest is not known to the registry.\",\"detail\":{\"manifest\":\"library/haproxy\"}}]}" client=docker-remote.registry.domain.fr
time="2025-01-24T10:03:17Z" level=debug msg="removing deleted pod containers from metrics: miscellaneous/kgb-agent-28961874-t5ptk/kgb-agent" module=controller
time="2025-01-24T10:05:38Z" level=error msg="docker-remote.registry.domain.fr/v2/dynatrace/dynatrace-operator/manifests/gktest: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"The named manifest is not known to the registry.\",\"detail\":{\"manifest\":\"dynatrace/dynatrace-operator\"}}]}" client=docker-remote.registry.domain.fr
time="2025-01-24T10:09:01Z" level=error msg="error syncing 'argo-rollout-argo-rollouts-697c9d754c-42m45/argo-rollouts': failed to sync pod argo-rollouts/argo-rollout-argo-rollouts-697c9d754c-42m45: failed to check container image \"argo-rollouts\": failed to get tags from remote registry for \"docker-remote.registry.domain.fr/argoproj/argo-rollouts\": failed to get docker image: Get \"https://docker-remote.registry.domain.fr/v2/argoproj/argo-rollouts/manifests/sha256-248bac515858915fbe52e4a6926d269ba3f167fe9c35a1a3546a56e891a9c2f7.sig\": context deadline exceeded (Client.Timeout exceeded while awaiting headers), requeuing" module=controller

time="2025-01-24T10:18:09Z" level=error msg="registry.k8s.io/v2/ingress-nginx/controller/manifests/v1.11.1: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"Manifest has media type \\\"application/vnd.docker.distribution.manifest.list.v2+json\\\" but client accepts [\\\"application/vnd.docker.distribution.manifest.v1+json\\\"]\"}]}\n" client=docker-remote.registry.domain.fr
time="2025-01-24T10:18:09Z" level=error msg="ghcr.io/v2/fluxcd/notification-controller/manifests/sha256-80a99e9ad4f41abd8549dd3ddb75c6c698550d6179c926d18ce98edbcaba8782.sig: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"OCI manifest found, but Accept header does not support OCI manifests\"}]}\n" client=docker-remote.registry.domain.fr
time="2025-01-24T10:18:09Z" level=error msg="registry.k8s.io/v2/coredns/coredns/manifests/v1.8.0: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"Manifest has media type \\\"application/vnd.docker.distribution.manifest.list.v2+json\\\" but client accepts [\\\"application/vnd.docker.distribution.manifest.v1+json\\\"]\"}]}\n" client=docker-remote.registry.domain.fr
time="2025-01-24T10:18:09Z" level=error msg="registry.k8s.io/v2/ingress-nginx/controller/manifests/v1.11.2: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"Manifest has media type \\\"application/vnd.oci.image.index.v1+json\\\" but client accepts [\\\"application/vnd.docker.distribution.manifest.v1+json\\\"]\"}]}\n" client=docker-remote.registry.domain.fr
time="2025-01-24T10:18:09Z" level=error msg="registry.k8s.io/v2/conformance/manifests/v1.17.5: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"Manifest has media type \\\"application/vnd.docker.distribution.manifest.list.v2+json\\\" but client accepts [\\\"application/vnd.docker.distribution.manifest.v1+json\\\"]\"}]}\n" client=docker-remote.registry.domain.fr
time="2025-01-24T10:18:09Z" level=error msg="registry.k8s.io/v2/coredns/coredns/manifests/v1.8.3: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"Manifest has media type \\\"application/vnd.docker.distribution.manifest.list.v2+json\\\" but client accepts [\\\"application/vnd.docker.distribution.manifest.v1+json\\\"]\"}]}\n" client=docker-remote.registry.domain.fr
time="2025-01-24T10:18:09Z" level=error msg="registry.k8s.io/v2/ingress-nginx/controller/manifests/v1.11.3: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"Manifest has media type \\\"application/vnd.oci.image.index.v1+json\\\" but client accepts [\\\"application/vnd.docker.distribution.manifest.v1+json\\\"]\"}]}\n" client=docker-remote.registry.domain.fr
time="2025-01-24T10:18:09Z" level=error msg="registry.k8s.io/v2/conformance/manifests/v1.17.5-beta.0: failed to get manifest response for tag, skipping (404): {\"errors\":[{\"code\":\"MANIFEST_UNKNOWN\",\"message\":\"Manifest has media type \\\"application/vnd.docker.distribution.manifest.list.v2+json\\\" but client accepts [\\\"application/vnd.docker.distribution.manifest.v1+json\\\"]\"}]}\n" client=docker-remote.registry.domain.fr
```

## Versions

Version-cecker : 0.8.5
K8S : 1.28

Guida per i contributori

Apri la guida per i contributori

Direzione di ricerca

No source file, test, or entry point is identified in the issue. Start by reproducing the registry requests described in the logs with the listed Version Checker and Kubernetes versions, then trace how manifest media types and registry responses are handled. Done means private and upstream registries no longer produce these errors while image versions remain discoverable.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Stack tecnologico
docker, go, kubernetes
Ambito
devops, infrastructure
Tipo di issue
Bug
Difficoltà
4/5
Tempo stimato
3-5 giorni
Stato di attività
Ferma
Chiarezza
Da chiarire
Idoneità per principianti
25/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.