Problem authentication with DockerRegistry

[fenix01]

Hi,

I need some help with prefect (prefecthq/prefect:2.6.6-python3.9). I'm not able to use a private registry on Scaleway (it's a french cloud provider).
To use the Scaleway registry, I have to create an API key and then I can login with docker like this :

docker login rg.fr-par.scw.cloud/mynamespace -u nologin --password-stdin <<< "$SCW_SECRET_KEY"

My deployment looks like this :

registry = DockerRegistry(registry_url="rg.fr-par.scw.cloud/mynamespace", username="nologin", password="MY_API_KEY")
registry.save("registry", overwrite=True)

docker = DockerContainer(networks=["net_backend"], image="rg.fr-par.scw.cloud/mynamespace/prefect:latest", registry=registry)
docker.save("docker", overwrite=True)

When I try to launch a flow, it raises a 403 error : permission denied. If I change the permission of my image from private to public. Prefect is able to pull my image.

Do you know what is the problem ?

agent_1  | 07:44:28.664 | ERROR   | prefect.agent - Failed to submit flow run 'ab11423e-6e1f-45c0-b40b-286701e34618' to infrastructure.
agent_1  | Traceback (most recent call last):
agent_1  |   File "/usr/local/lib/python3.9/site-packages/docker/api/client.py", line 268, in _raise_for_status
agent_1  |     response.raise_for_status()
agent_1  |   File "/usr/local/lib/python3.9/site-packages/requests/models.py", line 1021, in raise_for_status
agent_1  |     raise HTTPError(http_error_msg, response=self)
agent_1  | requests.exceptions.HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/images/create?tag=latest&fromImage=rg.fr-par.scw.cloud%2Fmynamespace%2Fprefect
agent_1  | 
agent_1  | The above exception was the direct cause of the following exception:
agent_1  | 
agent_1  | Traceback (most recent call last):
agent_1  |   File "/usr/local/lib/python3.9/site-packages/prefect/agent.py", line 259, in _submit_run_and_capture_errors
agent_1  |     result = await infrastructure.run(task_status=task_status)
agent_1  |   File "/usr/local/lib/python3.9/site-packages/prefect/infrastructure/docker.py", line 266, in run
agent_1  |     container = await run_sync_in_worker_thread(self._create_and_start_container)
agent_1  |   File "/usr/local/lib/python3.9/site-packages/prefect/utilities/asyncutils.py", line 68, in run_sync_in_worker_thread
agent_1  |     return await anyio.to_thread.run_sync(call, cancellable=True)
agent_1  |   File "/usr/local/lib/python3.9/site-packages/anyio/to_thread.py", line 31, in run_sync
agent_1  |     return await get_asynclib().run_sync_in_worker_thread(
agent_1  |   File "/usr/local/lib/python3.9/site-packages/anyio/_backends/_asyncio.py", line 937, in run_sync_in_worker_thread
agent_1  |     return await future
agent_1  |   File "/usr/local/lib/python3.9/site-packages/anyio/_backends/_asyncio.py", line 867, in run
agent_1  |     result = context.run(func, *args)
agent_1  |   File "/usr/local/lib/python3.9/site-packages/prefect/infrastructure/docker.py", line 322, in _create_and_start_container
agent_1  |     self._pull_image(docker_client)
agent_1  |   File "/usr/local/lib/python3.9/site-packages/prefect/infrastructure/docker.py", line 432, in _pull_image
agent_1  |     return docker_client.images.pull(image, tag)
agent_1  |   File "/usr/local/lib/python3.9/site-packages/docker/models/images.py", line 465, in pull
agent_1  |     pull_log = self.client.api.pull(
agent_1  |   File "/usr/local/lib/python3.9/site-packages/docker/api/image.py", line 429, in pull
agent_1  |     self._raise_for_status(response)
agent_1  |   File "/usr/local/lib/python3.9/site-packages/docker/api/client.py", line 270, in _raise_for_status
agent_1  |     raise create_api_error_from_http_exception(e) from e
agent_1  |   File "/usr/local/lib/python3.9/site-packages/docker/errors.py", line 39, in create_api_error_from_http_exception
agent_1  |     raise cls(e, response=response, explanation=explanation) from e
agent_1  | docker.errors.APIError: 500 Server Error for http+docker://localhost/v1.41/images/create?tag=latest&fromImage=rg.fr-par.scw.cloud%2Fmynamespace%2Fprefect: Internal Server Error ("Head "https://rg.fr-par.scw.cloud/v2/mynamespace/prefect/manifests/latest": error parsing HTTP 403 response body: no error details found in HTTP response body: "{\"details\":[{\"action\":\"read\",\"resource\":\"api_namespace\"},{\"action\":\"read\",\"resource\":\"registry_image\"}],\"message\":\"insufficient permissions\",\"type\":\"permissions_denied\"}"")

[fenix01]

I answer to my question. I did a typo in my code..
In the DockerContainer class, we have to set the image_registry attribute not registry.

In should be like this :
docker = DockerContainer(networks=["net_backend"], image="rg.fr-par.scw.cloud/mynamespace/prefect:latest", image_registry=registry)