Private Avatars are not CDN compatible
Currently, private avatars (projects + groups) are not loading when we have our CDN configuration activated, as there are permission checks happening. We need to differentiate for those avatars to load them not through the CDN or if that is not easily possible load all project + group avatars without the CDN.
See Support discussion : https://gitlab.com/gitlab-com/support-forum/issues/2476
Comment in other issue : https://gitlab.com/gitlab-org/gitlab-ce/issues/38189#note_41021344
Edited by Tim Zallmann