Skip to content

atelet: try each matching image pull credential in turn - #2104

Merged
Zoe Zhao (zoez7) merged 2 commits into
agent-substrate:mainfrom
BenTheElder:atelet-credential-provider-fallback
Oct 2, 2026
Merged

Zoe Zhao (zoez7) merged 2 commits into
agent-substrate:mainfrom
BenTheElder:atelet-credential-provider-fallback

Conversation

@BenTheElder

Copy link
Copy Markdown
Collaborator

Combine credentials from every provider matching an image and try them in order, like the kubelet: most specific auth key first, then config order. Skip failing providers instead of failing the pull.

Follow up for #917 (review)

@EItanya Eitan Yarmush (EItanya) left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good overall, couple of comments from codex 🤖

Comment thread internal/imagecache/imagecache.go Resolved
Combine credentials from every provider matching an image and try them
in order, like the kubelet: most specific auth key first, then config
order. Skip failing providers instead of failing the pull.
Config and layer blobs are fetched after the manifest, so retry the
full pull with the next credential, not just the manifest fetch. Skip a
provider whose response has an unparseable auth key instead of failing.
@BenTheElder
Benjamin Elder (BenTheElder) force-pushed the atelet-credential-provider-fallback branch from c60e43b to 1ea6bc0 Compare October 2, 2026 16:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/node kind/bug Something isn't working / bugfixes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants