Registry does not support multiple communication attempts during a single authentication session
Red Hat® Quay.io has problems with handling multiple scopes (reported by Errcode=ENHANCE_YOUR_CALM). This issue can also affect other registries.
Symptom
The registry used does not support multiple communication attempts during a single authentication session.
Alternatively, if you are mirroring IBM Cloud Pak® images with the oc ibm-pak --action mirror-images command, and it fails with an error similar to the following text:
error parsing HTTP 429 response body: invalid character 'T' looking for beginning of value: "Too many login attempts. \nPlease reset your Quay password and try again."
Solution
You can reduce the chunk size. Alternatively, you can switch to skopeo.
You might see the following output when encountering this issue:
`/title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>Request Header Or Cookie Too Large</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n”`
Reduce the default chunk size of 100. For example, pass —-chunks 10 to the oc ibm-pak mirror-image command.
Note: Any numerical value less than the default chunk size of 100 might work, depending on the target registry.