I set up a simple remote workspace provisioner (test button yields hello from within a docker image so that works).

In my project settings I defined the workspace spec to point to my internal docker repository with an access token. Running a workspace yields errors about authentication:

Jul 01 14:30:07 sub.mydomain.com dockerd[1001]: time="2026-07-01T14:30:07.058880777+02:00" level=error msg="Not continuing with pull after error" error="errors:\ndenied: requested access to the resource is denied\nunauthorized: authentication required\n"
Jul 01 14:30:07 sub.mydomain.com dockerd[1001]: time="2026-07-01T14:30:07.059282473+02:00" level=info msg="Ignoring extra error returned from registry" error="unauthorized: authentication required"

HOWEVER, if I define the same docker registry settings in my provisioner, and not in workspace spec, THEN IT DOES WORK.

It is my understanding that workspace spec is supposed to overwrite provisioner settings of docker registry so it should have worked in the first place.