Skip to content

Issues with Registry Assessment Executor #466

@hermanmaleiane

Description

@hermanmaleiane

Hi team,

Hope you are doing well.

I have setup my personal docker.io account to perform some tests on Self-hosted Registry Assessment using Helm Chart

Registry Configuration in .yaml file.

registryConfigs:
  - type: dockerhub
    credentials:
      username: "USERNAME"
      password: "PASSWORD"
    allowedRepositories: "REPOSITORY/ansible:*"
    port: "443"
    host: "https://registry-1.docker.io"
    cronSchedule: "* * * * *"

I'm able to put both pods running, as you can see in the below image.

Image

The issue is that Registry Assessment Executor is trying to connect container-upload.us-1.crowdstrike.com instead of my CrowdStrike tenant to send the scan results.

You can see the logs:

uuid=2af07380-8224-434b-8520-9108e348c307 total_repos=2 table=temp_catalog_1762333209207051641_2af07380
time=2025-11-05T09:00:09.505552Z name=registryassessmentexecutor.APIClient level=Error legacy_level=[ERROR] caller=client/apiclient.go:264 msg="Failed to send cloud alert" error="received 401 from uri container-upload.us-1.crowdstrike.com - response = {\n \"errors\": [\n  {\n   \"code\": \"UNAUTHORIZED\",\n   \"message\": \"authentication required\",\n   \"detail\": null\n  }\n ]\n}"


This is what im trying to achieve: https://falcon.crowdstrike.com/documentation/page/ad2d4792/shra-deploy-via-helm-chart

Is there something I'm missing?
Thanks in advance

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions