{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/3569","labels_url":"https://api.github.com/repos/openshift/origin/issues/3569/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/3569/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/3569/events","html_url":"https://github.com/openshift/origin/issues/3569","id":93302180,"number":3569,"title":"Docker registry auth checks leave hanging TCP connections","user":{"login":"ncdc","id":354,"avatar_url":"https://avatars.githubusercontent.com/u/354?v=3","gravatar_id":"","url":"https://api.github.com/users/ncdc","html_url":"https://github.com/ncdc","followers_url":"https://api.github.com/users/ncdc/followers","following_url":"https://api.github.com/users/ncdc/following{/other_user}","gists_url":"https://api.github.com/users/ncdc/gists{/gist_id}","starred_url":"https://api.github.com/users/ncdc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ncdc/subscriptions","organizations_url":"https://api.github.com/users/ncdc/orgs","repos_url":"https://api.github.com/users/ncdc/repos","events_url":"https://api.github.com/users/ncdc/events{/privacy}","received_events_url":"https://api.github.com/users/ncdc/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/openshift/origin/labels/area/reliability","name":"area/reliability","color":"006b75"},{"url":"https://api.github.com/repos/openshift/origin/labels/component/imageregistry","name":"component/imageregistry","color":"0052cc"},{"url":"https://api.github.com/repos/openshift/origin/labels/priority/P2","name":"priority/P2","color":"fbca04"}],"state":"open","locked":false,"assignee":{"login":"ncdc","id":354,"avatar_url":"https://avatars.githubusercontent.com/u/354?v=3","gravatar_id":"","url":"https://api.github.com/users/ncdc","html_url":"https://github.com/ncdc","followers_url":"https://api.github.com/users/ncdc/followers","following_url":"https://api.github.com/users/ncdc/following{/other_user}","gists_url":"https://api.github.com/users/ncdc/gists{/gist_id}","starred_url":"https://api.github.com/users/ncdc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ncdc/subscriptions","organizations_url":"https://api.github.com/users/ncdc/orgs","repos_url":"https://api.github.com/users/ncdc/repos","events_url":"https://api.github.com/users/ncdc/events{/privacy}","received_events_url":"https://api.github.com/users/ncdc/received_events","type":"User","site_admin":false},"milestone":null,"comments":22,"created_at":"2015-07-06T15:09:59Z","updated_at":"2015-08-24T14:52:04Z","closed_at":null,"body":"Every operation against the docker registry (image pull, push, prune, etc) requires the registry to check authentication with the master, using the token of the incoming request to the registry. That involves constructing a new API client object for each auth check. Throwaway clients cause lots of open idle connections that hang around until the server times out (master defaults to 1 hour). It is possible to run out of open file descriptors.\r\n\r\nDepends on https://github.com/GoogleCloudPlatform/kubernetes/pull/10557"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/134232337","html_url":"https://github.com/openshift/origin/issues/3569#issuecomment-134232337","issue_url":"https://api.github.com/repos/openshift/origin/issues/3569","id":134232337,"user":{"login":"ncdc","id":354,"avatar_url":"https://avatars.githubusercontent.com/u/354?v=3","gravatar_id":"","url":"https://api.github.com/users/ncdc","html_url":"https://github.com/ncdc","followers_url":"https://api.github.com/users/ncdc/followers","following_url":"https://api.github.com/users/ncdc/following{/other_user}","gists_url":"https://api.github.com/users/ncdc/gists{/gist_id}","starred_url":"https://api.github.com/users/ncdc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ncdc/subscriptions","organizations_url":"https://api.github.com/users/ncdc/orgs","repos_url":"https://api.github.com/users/ncdc/repos","events_url":"https://api.github.com/users/ncdc/events{/privacy}","received_events_url":"https://api.github.com/users/ncdc/received_events","type":"User","site_admin":false},"created_at":"2015-08-24T14:52:04Z","updated_at":"2015-08-24T14:52:04Z","body":"@liggitt we can close this, right, since #4116 went in?"}}