{
  "is": "issue",
  "title": "GitLab CI containers failures",
  "body": "\u003cp\u003eThe GitLab Container Registry is refusing requests to GitLab CI\npipelines between projects.\u003c/p\u003e\n\u003cp\u003eThis started on Friday, when the GitLab 18.11 upgrade was deployed. We\nare hoping for a quick fix from upstream, but in the meantime, we need\nyour help!\u003c/p\u003e\n\u003cp\u003eNormal GitLab operation should be unaffected. GitLab CI still works,\nit just fails with images from our own registry when accessed from\npersonal projects.\u003c/p\u003e\n\u003cp\u003eWe\u0026rsquo;ve found a workaround that requires you to report the failures to\nus. In \u003ca href=\"https://gitlab.torproject.org/tpo/tpa/team/-/work_items/42595\"\u003etpo/tpa/team#42595\u003c/a\u003e, we ask that you write a new comment\nwith the following information:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003esource project: failing project (e.g. \u003ccode\u003egroup/failing_project\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eregistry project: project it is trying to pull from (e.g. \u003ccode\u003etpo/tpa/base-images\u003c/code\u003e)\u003c/li\u003e\n\u003cli\u003eexample failed job: URL of the failed job\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eFor example, this was our first report:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cul\u003e\n\u003cli\u003esource project: Diziet/arti\u003c/li\u003e\n\u003cli\u003eregistry project: tpo/tpa/base-images\u003c/li\u003e\n\u003cli\u003eexample failed job: \u003ca href=\"https://gitlab.torproject.org/Diziet/arti/-/jobs/1485144\"\u003ehttps://gitlab.torproject.org/Diziet/arti/-/jobs/1485144\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eYou might be able to fix this yourself. If you have access to the\n\u0026ldquo;registry project\u0026rdquo; above, you can manually add the source project to\nthe CI/CD job token allowlist of the registry project\u0026quot;, by following:\u003c/p\u003e\n\u003col\u003e\n\u003cli\u003eSettings\u003c/li\u003e\n\u003cli\u003eCI/CD\u003c/li\u003e\n\u003cli\u003eJob token permissions\u003c/li\u003e\n\u003cli\u003eadd the \u0026ldquo;source project\u0026rdquo; to the allowlist\u003c/li\u003e\n\u003c/ol\u003e\n\u003cp\u003eYou MUST keep track of that exception and remove it once this incident\nis resolved!\u003c/p\u003e\n",
  "createdAt": "2026-04-20 11:58:39 -0400 -0400",
  "lastMod": "2026-04-23 11:15:36 -0400 -0400",
  "permalink": "https://status.torproject.org/issues/2026-04-20-gitlab-ci-outage/",
  "severity": "disrupted",
  "resolved": true,
  "informational": false,
  "resolvedAt": "2026-04-23 15:28:48 +0000",
  "affected": ["GitLab"],
  "filename": "2026-04-20-gitlab-ci-outage.md"
}