[supervisor] handle auth token like host:port:token

Author: kylos101

components/supervisor/pkg/supervisor/docker.go

@@ -312,21 +312,34 @@ func insertCredentialsIntoConfig(imageAuth string) (int, error) {
 		Auths: make(map[string]RegistryAuth),
 	}
 	authenticationPerHost := strings.Split(imageAuth, ",")
-	for _, hostCredentials := range authenticationPerHost {
-		parts := strings.SplitN(hostCredentials, ":", 2)
-		if len(parts) < 2 {
+	for _, hostCredentialsEntry := range authenticationPerHost {
+		parts := strings.SplitN(hostCredentialsEntry, ":", 3)
+		var registryIdentifier string
+		var token string
+
+		switch len(parts) {
+		case 2:
+			registryIdentifier = parts[0]
+			token = parts[1]
+		case 3:
+			registryIdentifier = parts[0] + ":" + parts[1]
+			token = parts[2]
+		default:
+			log.Warnf("authentication: skipping malformed credential entry (parts count %d not 2 or 3): '%s'", len(parts), hostCredentialsEntry)
 			continue
 		}
-		host := parts[0]
-		if host == "docker.io" || strings.HasSuffix(host, ".docker.io") {
-			host = "https://index.docker.io/v1/"
+		registryKey := registryIdentifier
+		if registryIdentifier == "docker.io" || strings.HasSuffix(registryIdentifier, ".docker.io") {
+			registryKey = "https://index.docker.io/v1/"
 		}
 
-		authConfig.Auths[host] = RegistryAuth{
-			Auth: parts[1],
+		authConfig.Auths[registryKey] = RegistryAuth{
+			Auth: token,
 		}
 	}
+
 	if len(authConfig.Auths) == 0 {
+		log.Warn("authentication: no valid credentials found after parsing all entries")
 		return 0, nil
 	}