Function shouldRetryWithCredentials

pkg/remote/pull.go:277–288

shouldRetryWithCredentials reports whether an anonymous registry request failed in a way that authenticating might fix: the registry denied access (401 Unauthorized or 403 Forbidden) or rate-limited the anonymous request (429 Too Many Requests, since authenticated accounts get higher limits).

(err error)

// (401 Unauthorized or 403 Forbidden) or rate-limited the anonymous request
// (429 Too Many Requests, since authenticated accounts get higher limits).
func shouldRetryWithCredentials(err error) bool {
	var terr *transport.Error
	if !errors.As(err, &terr) {
		return false
	}
	switch terr.StatusCode {
	case http.StatusUnauthorized, http.StatusForbidden, http.StatusTooManyRequests:
		return true
	default:
		return false
	}
}

func hasCagentAnnotation(annotations map[string]string) bool {
	_, exists := annotations["io.docker.agent.version"]