Canpute/canpute-ecs
3
1
Fork 0
Code Issues Pull requests Projects Releases Packages 2 Wiki Activity Actions

fix: use system pull JWT for registry secret on workload update #46

Merged
adam merged 2 commits from fix/force-rollout-on-taskdef-update into main 2026-02-12 22:00:52 -05:00
Conversation 0 Commits 2 Files changed 1 +2 -2
adam commented 2026-02-12 22:00:39 -05:00
Owner
Copy link

The update_workload path was using create_admin_registry_token() which
produces an RS256 registry token. The /v2/token endpoint expects a
Canpute JWT as the pull secret password, so kubelet was getting 401
Unauthorized. Use create_system_pull_jwt() to match the create path.

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

The update_workload path was using create_admin_registry_token() which produces an RS256 registry token. The /v2/token endpoint expects a Canpute JWT as the pull secret password, so kubelet was getting 401 Unauthorized. Use create_system_pull_jwt() to match the create path. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
fix: use system pull JWT for registry secret on workload update
Some checks failed
CI / test-backend (pull_request) Has been cancelled
Details
CI / test-frontend (pull_request) Has been cancelled
Details
e36736fa93 
The update_workload path was using create_admin_registry_token() which
produces an RS256 registry token. The /v2/token endpoint expects a
Canpute JWT as the pull secret password, so kubelet was getting 401
Unauthorized. Use create_system_pull_jwt() to match the create path.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Merge branch 'main' into fix/force-rollout-on-taskdef-update
All checks were successful
CI / test-backend (pull_request) Successful in 40s
Details
CI / test-frontend (pull_request) Successful in 24s
Details
9c9743bd50
adam merged commit 77d2e5fa23 into main 2026-02-12 22:00:52 -05:00
adam deleted branch fix/force-rollout-on-taskdef-update 2026-02-12 22:00:52 -05:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Canpute/canpute-ecs!46
No description provided.