harbor-operator icon indicating copy to clipboard operation
harbor-operator copied to clipboard

set registry basic auth secret immutable

Open XiaYinchang opened this issue 3 years ago • 0 comments

why don't we set registry basic auth secret immutable?

https://github.com/goharbor/harbor-operator/blob/8a09ac29ed1dfd0823639579d49da25152277d17/controllers/goharbor/harbor/registry.go#L161

i have encountered such a problem: every time i update the harbor config, it will regenerate a secret for registry basic auth. sometimes registry pod have been rolling updated, but core pod not, then they may mount different basic auth secret, and then harbor core use an old password to call registry, which resulting a failure.

XiaYinchang avatar Jul 21 '22 13:07 XiaYinchang