Fix registry insecure flag

Fixes #3333
hashicorp · Aug 16, 2023 · 0ffb375 · 0ffb375
1 parent 01b5f91
commit 0ffb375
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/internal/pkg/epinject/ociregistry/server.go b/internal/pkg/epinject/ociregistry/server.go
@@ -175,7 +175,12 @@ func (s *Server) getClient(ctx context.Context, repoStr string) (*http.Client, e
 	// auth as well as the bearer token protocol used when the server returns WWW-Authenticate.
 	// Plus it's well tested.
 
-	repo, err := name.NewRepository(repoStr)
+	opts := []name.Option{}
+	if strings.HasPrefix(s.Upstream, "http://") {
+		opts = append(opts, name.Insecure)
+	}
+
+	repo, err := name.NewRepository(repoStr, opts...)
 	if err != nil {
 		return nil, err
 	}