Sebastiaan van Stijn db9f143dae daemon/pkg/registry: require all resolved addresses to be insecure ...

Only consider a registry insecure through CIDR matching when all of its
resolved IP addresses match a configured insecure subnet.

This prevents a registry that resolves to both loopback and non-loopback
addresses from falling back to insecure requests.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

2026-09-30 21:07:56 +02:00

..

resumable

Move registry to daemon/pkg/registry

2025-07-24 12:11:51 -07:00

auth_test.go

daemon/pkg/registry: un-export ResolveAuthConfig

2025-08-01 16:47:47 +02:00

auth.go

daemon/pkg/registry: un-export ResolveAuthConfig

2025-08-01 16:47:47 +02:00

config_test.go

daemon/pkg/registry: loadInsecureRegistries: make order deterministic

2026-09-30 21:07:52 +02:00

config.go

daemon/pkg/registry: require all resolved addresses to be insecure

2026-09-30 21:07:56 +02:00

errors.go

chore: enable use-any rule from revive

2025-08-08 17:07:07 +02:00

registry_mock_test.go

chore: enable use-any rule from revive

2025-08-08 17:07:07 +02:00

registry_test.go

daemon/pkg/registry: require all resolved addresses to be insecure

2026-09-30 21:07:56 +02:00

registry.go

Merge pull request #52339 from thaJeztah/search_cleans

2026-04-16 13:05:48 +02:00

search_endpoint_v1_test.go

daemon/pkg/registry: use t.Context

2026-09-18 18:28:44 +02:00

search_endpoint_v1.go

daemon/pkg/registry: fix G119 (gosec)

2026-09-18 22:59:39 +02:00

search_session.go

daemon/pkg/registry: replace cloneRequest for request.Clone

2026-08-31 16:54:25 +02:00

search_test.go

daemon/pkg/registry: use documentation IP addresses in tests

2026-09-30 21:07:56 +02:00

search.go

api/types/filters: move to daemon/internal

2025-10-08 12:06:26 -04:00

service_v2.go

Move registry to daemon/pkg/registry

2025-07-24 12:11:51 -07:00

service.go

daemon/pkg/registry: un-export ResolveAuthConfig

2025-08-01 16:47:47 +02:00