GitHub user krutoileshii created a discussion: DockerOperator SSL Verification
### Apache Airflow Provider(s) docker ### Versions of Apache Airflow Providers Trying to authenticate with the DockerOpeartor using airflow connection to an internal registry and getting the TLS certificate verification failure. I am able to login just fine into the registry from command line with no issues. Insecure registry is set up as well already. Not sure how to bypass this. I do not have access to the certificate for the server. Any help would be appreciated. ``` [2025-08-08, 13:03:52] INFO - Connection Retrieved 'docker-connection': source="airflow.hooks.base" [2025-08-08, 13:03:52] INFO - Login into Docker Registry: https://allo-asp03:6278/: source="airflow.task.hooks.airflow.providers.docker.hooks.docker.DockerHook" [2025-08-08, 13:03:52] ERROR - Login failed: source="airflow.task.hooks.airflow.providers.docker.hooks.docker.DockerHook" [2025-08-08, 13:03:52] ERROR - Task failed with exception: source="task" APIError: 500 Server Error for http+docker://localhost/v1.41/auth: Internal Server Error ("login attempt to https://allo-asp03:6278 failed with status: authenticating creds for "allo-asp03:6278": pinging container registry allo-asp03:6278: Get "https://allo-asp03:6278/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority") File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/sdk/execution_time/task_runner.py", line 877 in run File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/sdk/execution_time/task_runner.py", line 1164 in _execute_task File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/sdk/bases/operator.py", line 397 in wrapper File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/providers/docker/operators/docker.py", line 482 in execute File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/providers/docker/operators/docker.py", line 356 in cli File "/usr/local/lib/python3.12/functools.py", line 998 in __get__ File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/providers/docker/hooks/docker.py", line 157 in api_client File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/airflow/providers/docker/hooks/docker.py", line 198 in __login File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/docker/api/daemon.py", line 152 in login File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/docker/api/client.py", line 281 in _result File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/docker/api/client.py", line 277 in _raise_for_status File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/docker/errors.py", line 39 in create_api_error_from_http_exception HTTPError: 500 Server Error: Internal Server Error for url: http+docker://localhost/v1.41/auth File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/docker/api/client.py", line 275 in _raise_for_status File "/virt_envs/.airflow_venv/lib/python3.12/site-packages/requests/models.py", line 1026 in raise_for_status ``` ### Apache Airflow version 3.0.3 ### Operating System Ubuntu WSL2 ### Deployment Virtualenv installation ### Deployment details podman version 4.3.1 ### What happened I would expect airflow to honor the insecure registries. ### What you think should happen instead Need an ability to bypass this verification. ### How to reproduce Have private registry with insecure certs Add docker_connection Add proper insecure registry configs Have a dag that pulls from that registry. Receive error ### Anything else _No response_ ### Are you willing to submit PR? - [ ] Yes I am willing to submit a PR! ### Code of Conduct - [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md) GitHub link: https://github.com/apache/airflow/discussions/54290 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
