question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Tekton on OpenShift: authentication issue with internal OpenShift registry

See original GitHub issue

From https://github.com/GoogleContainerTools/jib/issues/2074#issuecomment-579921534

I did a new test using the following parameters top of ocp3 and that fails using jib-maven 2.0.0

    - name: build-and-push
      image: gcr.io/cloud-builders/mvn
      command:
        - mvn
        - compile
        - com.google.cloud.tools:jib-maven-plugin:2.0.0:build
        - -Djib.from.image=registry.redhat.io/redhat-openjdk-18/openjdk18-openshift
        - -Djib.allowInsecureRegistries=true
        - -Djib.from.auth.username=my-user
        - -Djib.from.auth.password=my-pwd
        - -Dimage=$(outputs.resources.image.url)

If I add to the config too -DsendCredentialsOverHttp=true, then we got this error

[ERROR] Failed to execute goal com.google.cloud.tools:jib-maven-plugin:2.0.0:build (default-cli) on project rest-http: 
Build image failed: Failed to authenticate with registry docker-registry.default.svc:5000/test/sb-image 
because: server did not return 'WWW-Authenticate: Bearer' header: Basic 
realm=openshift,error="access denied" -> [Help 1]

Issue Analytics

  • State:closed
  • Created 4 years ago
  • Comments:23 (8 by maintainers)

github_iconTop GitHub Comments

2reactions
cmoulliardcommented, Jan 30, 2020

Here is the stack trace generated including the HTTP requests : https://gist.github.com/cmoulliard/2a0edd9f2e6e1f3b28539539021e2426

@chanseokoh

0reactions
chanseokohcommented, Feb 25, 2020

@cmoulliard we’ve released Jib 2.1.0 with this fix. You should no longer see the error about server did not return 'WWW-Authenticate: Bearer' header.

Read more comments on GitHub >

github_iconTop Results From Across the Web

2007616 – How can we configure OpenShift Pipelines so that ...
Description of problem: CU would like to use their own images in openshift-pipelines / tekton. The registry they want to get the images...
Read more >
Using Tekton Chains for OpenShift Pipelines supply chain ...
Authenticating to an OCI registry. Before pushing signatures to an OCI registry, cluster administrators must configure Tekton Chains to authenticate with the ...
Read more >
Troubleshooting runtime issues - IBM
When using OpenShift Container Platform on a cloud with Kubernetes service and an internal Docker registry, performing a docker push into the internal...
Read more >
Workspaces :: Tekton Tutorial
Build the container image using the buildah task and push to the internal container registry. Finally deploy the application onto Kubernetes using openshift- ......
Read more >
Tekton Hub
This task needs authentication to git in order to push after the git operation. ... upgrade a helm chart into your Kubernetes /...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found