Replication endpoints/rules question

[perezjasonr]

In the docs it states:

If the namespace does not exist in the destination registry, a new namespace is created automatically. If it already exists and the user account that is configured in the replication policy does not have write privileges in it, the process fails. Member information is not replicated.

how does it determine which credentials are needed for the artifacts that come over?

I ask because the values of the harbor helm chart, under registry have, for example:

credentials:
    username: "user"
    password: "password"

but thats not working when I try to pull after a replication. I tried the admin creds, and that worked. What determines which creds it gets?

[perezjasonr]

after some testing i concluded that if it makes a new namespace/project it only has admin user. I dont see a way for replication to reference a user to allow permissions.

[a-mccarthy]

Hello @perezjasonr hope you were able to resolve your issue. Is there a way that we should make the docs more clear? thanks!