goharbor / harbor

An open source trusted cloud native registry project that stores, signs, and scans content.
https://goharbor.io
Apache License 2.0
23.05k stars 4.65k forks source link

Multiple Harbors Copying 401 #20673

Open hsy-go opened 1 week ago

hsy-go commented 1 week ago

We have deployed two Harbor clusters based on shared storage

  1. An error occurred when using the copy function from Harbor1 (A, B) to Harbor (C, D) error: Jun 27 17:59:35 172.22.0.1 jobservice[1035]: 2024-06-27T09:59:35Z [ERROR] [/controller/replication/transfer/image/transfer.go:470]: failed to pull the manifest of artifact yeepay-docker-staging-local/jgs-invoice-server:202406271757_4583886c: http status code: 401, body: {"errors":[{"code":"UNAUTHORIZED","message":"unauthorized to access repository: yeepay-docker-staging-local/jgs-invoice-server, action: pull: unauthorized to access repository: yeepay-docker-staging-local/jgs-invoice-server, action: pull"}]} Jun 27 17:59:35 172.22.0.1 jobservice[1035]: 2024-06-27T09:59:35Z [ERROR] [/controller/replication/transfer/image/transfer.go:194]: http status code: 401, body: {"errors":[{"code":"UNAUTHORIZED","message":"unauthorized to access repository: yeepay-docker-staging-local/jgs-invoice-server, action: pull: unauthorized to access repository: yeepay-docker-staging-local/jgs-invoice-server, action: pull"}]} Jun 27 17:59:35 172.22.0.1 jobservice[1035]: 2024-06-27T09:59:35Z [ERROR] [/controller/replication/transfer/image/transfer.go:200]: got error during the whole transfer period, mark the job failure Jun 27 17:59:35 172.22.0.1 jobservice[1035]: 2024-06-27T09:59:35Z [ERROR] [/jobservice/runner/redis.go:123]: Job 'REPLICATION:48ca340393330104ecd48016' exit with error: run error: got error during the whole transfer period, mark the job failure Jun 27 17:59:35 172.22.0.1 jobservice[1035]: 2024-06-27T09:59:35Z [ERROR] [/jobservice/hook/hook_agent.go:155]: Retry: sending hook event error: {"errors":[{"code":"NOT_FOUND","message":"task with job ID a12e5b32f8128ed9aee99c32 not found"}]}
hsy-go commented 1 week ago

共享存储的二台harbor,复制任务去另一套harbor失败率太高,jobservice组件报401

MinerYang commented 1 week ago

Please make sure your account has proper permission to pull image from repository yeepay-docker-staging-local/jgs-invoice-server

stonezdj commented 2 days ago

Please check the harbor core log in the source Harbor, and make sure there is no such log https://github.com/goharbor/harbor/blob/4ecc60dbd748569e2d759d6c449e0e6797104146/src/core/auth/authenticator.go#L158