Hello, I'm struggling to find the root cause of breaking pipelines that happened just after we upgraded to 0.19.19.
Seems like when accessing a container from a private registry, in a delayed step, the credentials are not being chained?
I've tried to reproduce it as simple as possible below:
func (m *Tests) PullWithCreds(ctx context.Context) (string, error) {
ctr := dag.Container().
WithRegistryAuth("private.registry.net", "nadir.lloret", dag.SetSecret("foobar", "xxxxxxxxxxxxxxxx")).
From("private.registry.net/base-noble:latest")
return ctr.File("/etc/hosts").Digest(ctx)
}
This works on 0.19.8, but breaks with 0.19.9 with:
failed to copy: httpReadSeeker: failed open: unexpected status from GET request to https://private.registry.net/base-noble/blobs/sha256:b3d818dbc26dc195a7ecc9ef9f2ddfe34c5062bd29b25c80aa6006594aea166e: 401 Unauthorized
unauthorized: unauthorized to access repository: base-noble, action: pull: unauthorized to access repository: base-noble, action: pull
Has anything intentionally changed that I'm missing from release notes?
Thanks!