Pull for private repositories with client-local credentials hits authorization failures whereas push works (due to my recent changes to leverage docker-credential helpers that may be present on the client system). This is because the server-side pull leverages the CRI implementation whereas server-side push interfaces with containerd directly.
So, implement server-side pull to replicate the CRI implementation but use the same credentials/auth resolver setup that is used for the current push impl.
Pull for private repositories with client-local credentials hits authorization failures whereas push works (due to my recent changes to leverage docker-credential helpers that may be present on the client system). This is because the server-side pull leverages the CRI implementation whereas server-side push interfaces with containerd directly.
So, implement server-side pull to replicate the CRI implementation but use the same credentials/auth resolver setup that is used for the current push impl.