#12384 Add permissions needed for sync script to push to quay.io/fedora/fedora-iot
Closed: Fixed a month ago by pwhalen. Opened a month ago by pwhalen.

  • Describe the issue

Fedora IoT uses a sync script in our compose to push container images to quay.io/fedora/fedora-bootc. This has been working since Fedora 40 for the fedora-bootc image.

We recently added a Fedora IoT base image, and would like that to be pushed to quay.io/fedora/fedora-iot but that push fails with:

uploading manifest 42 to quay.io/fedora/fedora-iot: unauthorized: access to the requested resource is not authorized

Please add the necessary permissions needed for a successful push to the registry.

  • When do you need this? (YYYY/MM/DD)
    ASAP

  • When is this no longer needed or useful? (YYYY/MM/DD)
    N/A

  • If we cannot complete your request, what is the impact?
    Fedora IoT base images not pushed.


Metadata Update from @jnsamyak:
- Issue tagged with: medium-gain, medium-trouble, ops

a month ago

Metadata Update from @jnsamyak:
- Issue assigned to jnsamyak

a month ago

Hey @pwhalen

I tried looking into the repo permission of the repository and I added the same set of people as admin from bootc to fedora-iot, can you confirm now that you can push?

Were you able to push to the repo, @pwhalen?

Were you able to push to the repo, @pwhalen?

Sorry for the delayed response, we were battling some other issues (osbuild and config changes) but finally got a compose- unfortunately the push to quay.io did not work. I think the change needs to be made to the IoT compose box rather than a specific user. I believe @kevin worked on that portion for the fedora-bootc container push to quay.io ?

@jnsamyak you need to add the fedora+publisher user with 'Write' permission. Thats the user that is used to upload image content. ;)

I added that to the fedora-iot repo.

@pwhalen can you retry now?

@jnsamyak you need to add the fedora+publisher user with 'Write' permission. Thats the user that is used to upload image content. ;)

I added that to the fedora-iot repo.

@pwhalen can you retry now?

That looks to be working now, F42/Rawhide push was successful.

Thank you kindly @kevin @jnsamyak !

Metadata Update from @pwhalen:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

a month ago

Log in to comment on this ticket.

Metadata
Boards 1
Ops Status: Backlog