Upload an image to a hosted docker repository that has its deployment policy set to disallow overwrites. This works fine.
Now attempt to download the tag of the recently uploaded image. This will fail with a 400 response. The log shows the warning:
2020-08-24 13:07:42,301-0400 WARN [qtp608516739-82642] EnterprisePrimaryNode_1 nexusadmin org.sonatype.nexus.repository.docker.internal.V2Handlers - Error: GET /v2/pipeline/python-webapp/manifests/3.0.10: 400 - Repository does not allow updating assets: docker-hosted
Expected: Download of an asset should not cause the deployment policy to be evaluated.
Temporary workaround (until this is fixed)... set the deployment policy of the repository to allow redeploys.