krutoileshii opened a new issue, #54286: URL: https://github.com/apache/airflow/issues/54286
### Apache Airflow Provider(s) docker ### Versions of Apache Airflow Providers Trying to authenticate with the DockerOpeartor using airflow connection to an internal registry and getting the TLS certificate verification failure. I am able to login just fine into the registry from command line with no issues. Insecure registry is set up as well already. Not sure how to bypass this. I do not have access to the certificate for the server. Any help would be appreciated. ``` [2025-08-08, 13:03:52] INFO - Connection Retrieved 'docker-connection': source="airflow.hooks.base" [2025-08-08, 13:03:52] INFO - Login into Docker Registry: https://allo-asp03:6278/: source="airflow.task.hooks.airflow.providers.docker.hooks.docker.DockerHook" [2025-08-08, 13:03:52] ERROR - Login failed: source="airflow.task.hooks.airflow.providers.docker.hooks.docker.DockerHook" [2025-08-08, 13:03:52] ERROR - Task failed with exception: source="task" APIError: 500 Server Error for http+docker://localhost/v1.41/auth: Internal Server Error ("login attempt to https://allo-asp03:6278 failed with status: authenticating creds for "allo-asp03:6278": pinging container registry allo-asp03:6278: Get "https://allo-asp03:6278/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority") File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/sdk/execution_time/task_runner.py", line 877 in run File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/sdk/execution_time/task_runner.py", line 1164 in _execute_task File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/sdk/bases/operator.py", line 397 in wrapper File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/providers/docker/operators/docker.py", line 482 in execute File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/providers/docker/operators/docker.py", line 356 in cli File "/usr/local/lib/python3.12/functools.py", line 998 in __get__ File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/providers/docker/hooks/docker.py", line 157 in api_client File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/providers/docker/hooks/docker.py", line 198 in __login File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/docker/api/daemon.py", line 152 in login File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/docker/api/client.py", line 281 in _result File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/docker/api/client.py", line 277 in _raise_for_status File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/docker/errors.py", line 39 in create_api_error_from_http_exception HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/auth File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/docker/api/client.py", line 275 in _raise_for_status File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/requests/models.py", line 1026 in raise_for_status ``` ### Apache Airflow version 3.0.3 ### Operating System Ubuntu WSL2 ### Deployment Virtualenv installation ### Deployment details podman version 4.3.1 ### What happened I would expect airflow to honor the insecure registries. ### What you think should happen instead Need an ability to bypass this verification. ### How to reproduce Have private registry with insecure certs Add docker_connection Add proper insecure registry configs Have a dag that pulls from that registry. Receive error ### Anything else _No response_ ### Are you willing to submit PR? - [ ] Yes I am willing to submit a PR! ### Code of Conduct - [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
