From 6fb32b6da3026562d6424428a5149ad9e7fc3d23 Mon Sep 17 00:00:00 2001 From: Charlie Le Date: Fri, 25 Sep 2026 14:58:49 -0700 Subject: [PATCH] Pull minio from docker.io/cortexproject instead of quay.io Every integration leg is failing at Preload Images: docker pull quay.io/minio/minio:RELEASE.2024-05-28T17-19-04Z Error response from daemon: unauthorized: access to the requested resource is not authorized MinIO has withdrawn its public images from quay.io, after doing the same on Docker Hub (which is why #7837 moved us to quay.io). No mirror still serves the multi-arch RELEASE.2024-05-28T17-19-04Z image. Host an unmodified copy of MinIO's official RELEASE.2024-07-04T14-25-45Z image under docker.io/cortexproject/minio. It was copied with `crane copy`, so its index digest, sha256:5db7e40b69f0c3ad5a878521ff5029468e3070ef146c084dc2540e2d492075c4, is identical to the source and it keeps linux/amd64 and linux/arm64. Its binary reports the commit behind MinIO's signed release tag, and its SLSA provenance records a build of github.com/minio/minio from MinIO's own release commit. The image runs as root like the previous one, so the e2e harness works unchanged. The development docker-compose stacks previously pulled the untagged (latest) image; pin them to the same tag, since that is the only tag we host. Signed-off-by: Charlie Le --- .github/workflows/test-build-deploy.yml | 2 +- development/tsdb-blocks-storage-s3-gossip/docker-compose.yml | 2 +- .../tsdb-blocks-storage-s3-single-binary/docker-compose.yml | 2 +- development/tsdb-blocks-storage-s3/docker-compose.yml | 2 +- integration/e2e/images/images.go | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/test-build-deploy.yml b/.github/workflows/test-build-deploy.yml index b307b8cbf9..fe9396eeec 100644 --- a/.github/workflows/test-build-deploy.yml +++ b/.github/workflows/test-build-deploy.yml @@ -407,7 +407,7 @@ jobs: done } - retry docker pull quay.io/minio/minio:RELEASE.2024-05-28T17-19-04Z + retry docker pull docker.io/cortexproject/minio:RELEASE.2024-07-04T14-25-45Z retry docker pull consul:1.8.4 retry docker pull quay.io/coreos/etcd:v3.5.29 if [ "$TEST_TAGS" = "integration_backward_compatibility" ]; then diff --git a/development/tsdb-blocks-storage-s3-gossip/docker-compose.yml b/development/tsdb-blocks-storage-s3-gossip/docker-compose.yml index 0bfbc0f6c1..ac87160f36 100644 --- a/development/tsdb-blocks-storage-s3-gossip/docker-compose.yml +++ b/development/tsdb-blocks-storage-s3-gossip/docker-compose.yml @@ -8,7 +8,7 @@ services: - 8500:8500 minio: - image: quay.io/minio/minio + image: docker.io/cortexproject/minio:RELEASE.2024-07-04T14-25-45Z command: [ "server", "/data" ] environment: - MINIO_ACCESS_KEY=cortex diff --git a/development/tsdb-blocks-storage-s3-single-binary/docker-compose.yml b/development/tsdb-blocks-storage-s3-single-binary/docker-compose.yml index ea247084cf..84d890dde6 100644 --- a/development/tsdb-blocks-storage-s3-single-binary/docker-compose.yml +++ b/development/tsdb-blocks-storage-s3-single-binary/docker-compose.yml @@ -8,7 +8,7 @@ services: - 8500:8500 minio: - image: quay.io/minio/minio + image: docker.io/cortexproject/minio:RELEASE.2024-07-04T14-25-45Z command: [ "server", "/data" ] environment: - MINIO_ACCESS_KEY=cortex diff --git a/development/tsdb-blocks-storage-s3/docker-compose.yml b/development/tsdb-blocks-storage-s3/docker-compose.yml index 54d819d745..bc966244cc 100644 --- a/development/tsdb-blocks-storage-s3/docker-compose.yml +++ b/development/tsdb-blocks-storage-s3/docker-compose.yml @@ -8,7 +8,7 @@ services: - 8500:8500 minio: - image: quay.io/minio/minio + image: docker.io/cortexproject/minio:RELEASE.2024-07-04T14-25-45Z command: [ "server", "/data" ] environment: - MINIO_ACCESS_KEY=cortex diff --git a/integration/e2e/images/images.go b/integration/e2e/images/images.go index c2714676b1..450beef9ee 100644 --- a/integration/e2e/images/images.go +++ b/integration/e2e/images/images.go @@ -8,7 +8,7 @@ package images var ( Memcached = "memcached:1.6.1" Redis = "docker.io/redis:7.0.4-alpine" - Minio = "quay.io/minio/minio:RELEASE.2024-05-28T17-19-04Z" + Minio = "docker.io/cortexproject/minio:RELEASE.2024-07-04T14-25-45Z" // Unmodified copy of MinIO's official image; MinIO withdrew its public images. Consul = "consul:1.8.4" ETCD = "quay.io/coreos/etcd:v3.5.29" Prometheus = "quay.io/prometheus/prometheus:v3.9.1"