mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-12 19:32:48 -06:00
d5265896de
ECR uses S3 pre-signed URLs for OCI blobs. If the ECR auth header is added to the pre-signed URL, S3 returns a 400 error. We address the issue by checking whether the request host matches the one specified in the OCI configuration. Signed-off-by: Grégoire Payen de La Garanderie <gregoire.payen.de.la.garanderie@intel.com>