Trying to fetch a container image from Crane (3.0.0) with Microk8s 1.16 (dockerd)

gistfile1.txt

astevens@anthill:/var/snap/microk8s$ sudo snap refresh microk8s --channel=1.16/edge
microk8s (1.16/edge) v1.16.0-alpha.3 from Canonical✓ refreshed

astevens@anthill:/var/snap/microk8s$ microk8s.ctr --debug image pull --user user:pass docker.example.com/default_organization-example-docker:latest 
DEBU[0000] fetching                                      image="docker.example.com/default_organization-example-docker:latest"
DEBU[0000] resolving                                    
DEBU[0000] do request                                    request.headers=map[Accept:[application/vnd.docker.distribution.manifest.v2+json, application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.oci.image.manifest.v1+json, application/vnd.oci.image.index.v1+json, *]] request.method=HEAD url="https://docker.example.com/v2/default_organization-example-docker/manifests/latest"
DEBU[0000] fetch response received                       response.headers=map[Content-Type:[text/html; charset=iso-8859-1] Date:[Tue, 27 Aug 2019 18:50:28 GMT] Server:[Apache/2.4.6 (CentOS)] Www-Authenticate:[Basic realm="Kerberos Login"]] status="401 Unauthorized" url="https://docker.example.com/v2/default_organization-example-docker/manifests/latest"
DEBU[0000] Unauthorized                                  header="Basic realm="Kerberos Login""
DEBU[0000] do request                                    request.headers=map[Accept:[application/vnd.docker.distribution.manifest.v2+json, application/vnd.docker.distribution.manifest.list.v2+json, application/vnd.oci.image.manifest.v1+json, application/vnd.oci.image.index.v1+json, *]] request.method=HEAD url="https://docker.example.com/v2/default_organization-example-docker/manifests/latest"
DEBU[0000] fetch response received                       response.headers=map[Accept-Ranges:[bytes] Content-Length:[1364] Content-Type:[application/vnd.docker.distribution.manifest.v2+json] Date:[Tue, 27 Aug 2019 18:50:28 GMT] Docker-Distribution-Api-Version:[registry/2.0] Etag:["554-58e9b4c94d649"] Last-Modified:[Fri, 26 Jul 2019 20:22:19 GMT] Server:[Apache/2.4.6 (CentOS)]] status="200 OK" url="https://docker.example.com/v2/default_organization-example-docker/manifests/latest"
ctr: failed to resolve reference "docker.example.com/default_organization-example-docker:latest": could not resolve digest for docker.example.com/default_organization-example-docker:latest


sudo foreman-tail 
==> /var/log/httpd/docker.example.com_access_ssl.log <==
1.1.1.1 - - [27/Aug/2019:15:12:38 -0400] "HEAD /v2/default_organization-example-docker/manifests/latest HTTP/1.1" 401 - "-" "Go-http-client/1.1"
1.1.1.1 - acme [27/Aug/2019:15:12:38 -0400] "HEAD /v2/default_organization-example-docker/manifests/latest HTTP/1.1" 302 - "-" "Go-http-client/1.1"

==> /var/log/httpd/foreman-ssl_access_ssl.log <==
1.1.1.1 - - [27/Aug/2019:15:12:39 -0400] "HEAD /pulp/docker/v2/390d13ed-6c84-4a79-bfd2-613c4b2ada0b/manifests/2/latest HTTP/1.1" 200 - "https://docker.example.com/v2/default_organization-example-docker/manifests/latest" "Go-http-client/1.1"