Repository navigation
Fix OCIR scoped token authentication - #6
Closed
harrisonoconnorhover wants to merge 300 commits into
Closed
harrisonoconnorhover wants to merge 300 commits into
harrisonoconnorhover wants to merge 300 commits into
Conversation
…lity-platform-profiles Cloud portability Phase 2: named platform profiles
…lity-provider-registry Cloud portability Phase 2: lazy provider factories
…lity-canonical-schema Cloud portability Phase 2: canonical relation and schema contracts
…lity-sql-dialects Add explicit portable SQL dialect contract
…lity-graph-ast Compile pipeline graphs through relational AST
…lity-telemetry Add provider-neutral run telemetry
…lity-dependencies Assemble provider runtime dependencies
…lity-bigquery Route BigQuery through warehouse capabilities
…lity-bigquery-state Route BigQuery durable state through provider runtime
…lity-dataplex Route Dataplex through the catalog provider runtime
…lity-gcp-secrets Route GCP secrets through the provider runtime
…lity-cloud-run Route Cloud Run through launcher provider
…lity-fargate Add fail-closed Fargate projection
…lity-aws-runtime Prepare keyless AWS runtime identity
…lity-fargate-runtime Cloud portability: provision bounded Fargate runtime
…uncher Add OCI Container Instances launcher projection
Add OCI Terraform foundation
…fecycle feat(oci): add lifecycle controller and operations
…tifact-promotion feat(oci): add digest-preserving OCIR promotion
…ntroller-publication Publish OCI controller from the reviewed wheel
Prepare 0.9.0rc2 release candidate
…igest-addressing Preserve OCI artifact identity when tag immutability is unavailable
Prepare 0.9.0rc3 release candidate
…y-rotation-schedule fix(oci): schedule automatic key rotation
…epository-metadata fix(oci): verify exact repository metadata
Co-authored-by: Harrison O'Connor-Hoover <harrisonoconnorhover@users.noreply.github.com>
Co-authored-by: Harrison O'Connor-Hoover <harrisonoconnorhover@users.noreply.github.com>
Co-authored-by: Harrison O'Connor-Hoover <harrisonoconnorhover@users.noreply.github.com>
…docker-config Fix isolated Docker config for OCIR promotion
Prepare 0.9.0rc6 release candidate
Contributor
Author
|
Opened against upstream by CLI remote inference in error; superseded by the protected-fork PR. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
BEARER_TOKENusernameRoot cause
Docker Buildx treats
identitytokenas an input to a registry OAuth exchange. OCIR short-lived access tokens are already scoped bearer tokens and must be presented through Oracle-compatible Docker login credentials. Live read-only probes showed403 Forbiddenforidentitytokenand authenticatednot foundfor the same token in the corrected form.Checks
uv run pytest -q tests/bootstrap/test_oci_image_promotion.py tests/bootstrap/test_oci_controller_publication.pyuv run ruff check src/dander/bootstrap/oci_image.py tests/bootstrap/test_oci_image_promotion.py tests/bootstrap/test_oci_controller_publication.pyuv run mypy src/dander/bootstrap/oci_image.pygit diff --check