Skip to content

Issues with Registry Assessment Executor #466

@hermanmaleiane

Description

@hermanmaleiane

Hi team,

Hope you are doing well.

I have setup my personal docker.io account to perform some tests on Self-hosted Registry Assessment using Helm Chart

Registry Configuration in .yaml file.

registryConfigs:
  - type: dockerhub
    credentials:
      username: "USERNAME"
      password: "PASSWORD"
    allowedRepositories: "REPOSITORY/ansible:*"
    port: "443"
    host: "https://registry-1.docker.io"
    cronSchedule: "* * * * *"

I'm able to put both pods running, as you can see in the below image.

Image

The issue is that Registry Assessment Executor is trying to connect container-upload.us-1.crowdstrike.com instead of my CrowdStrike tenant to send the scan results.

You can see the logs:

uuid=2af07380-8224-434b-8520-9108e348c307 total_repos=2 table=temp_catalog_1762333209207051641_2af07380
time=2025-11-05T09:00:09.505552Z name=registryassessmentexecutor.APIClient level=Error legacy_level=[ERROR] caller=client/apiclient.go:264 msg="Failed to send cloud alert" error="received 401 from uri container-upload.us-1.crowdstrike.com - response = {\n \"errors\": [\n  {\n   \"code\": \"UNAUTHORIZED\",\n   \"message\": \"authentication required\",\n   \"detail\": null\n  }\n ]\n}"


This is what im trying to achieve: https://falcon.crowdstrike.com/documentation/page/ad2d4792/shra-deploy-via-helm-chart

Is there something I'm missing?
Thanks in advance

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions