Description
I was trying to upload an attestation using the public Rekor instance, but it kept failing with the following error message:
Error: signing <image>: Post "https://rekor.sigstore.dev/api/v1/log/entries": POST https://rekor.sigstore.dev/api/v1/log/entries giving up after 4 attempt(s)
error during command execution: signing <image>: Post "https://rekor.sigstore.dev/api/v1/log/entries": POST https://rekor.sigstore.dev/api/v1/log/entries giving up after 4 attempt(s)
After doing quite some extensive investigation by building cosign myself and hosting Rekor locally, I finally figured out that I receive the same error when setting max_request_body_size, which defaults to 0 in the code (i.e. no limit).
So not only is the limit for the public instance undocumented, the error itself does not provide any explanation.
I propose some documentation on the limit of the public instance + a clearer error message when the limit is reached.
Happy to create a PR if you guys agree.
Version
Cosign: v2.6.3
Rekor: v1.5.1
Description
I was trying to upload an attestation using the public Rekor instance, but it kept failing with the following error message:
After doing quite some extensive investigation by building cosign myself and hosting Rekor locally, I finally figured out that I receive the same error when setting
max_request_body_size, which defaults to 0 in the code (i.e. no limit).So not only is the limit for the public instance undocumented, the error itself does not provide any explanation.
I propose some documentation on the limit of the public instance + a clearer error message when the limit is reached.
Happy to create a PR if you guys agree.
Version
Cosign: v2.6.3
Rekor: v1.5.1