UsernamePasswordDockerRegistryTokenSource do produce a token by just Base64 encoding username+password. An actual authentication token has to be generated using the auth API , which require some docker CLI or API call. As such sounds to me UsernamePasswordDockerRegistryTokenSource is just a non-sense and should be disabled