fix: ensure Kaniko build strategy works with insecure registries

apache · Mar 15, 2021 · 55f74d3 · 55f74d3
1 parent e0486ce
commit 55f74d3
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/pkg/trait/builder.go b/pkg/trait/builder.go
@@ -342,9 +342,15 @@ func (t *builderTrait) kanikoTask(e *Environment) (*v1.ImageTask, error) {
 			return nil, err
 		}
 		mountRegistrySecret(e.Platform.Status.Build.Registry.Secret, secret, &volumes, &volumeMounts, &env)
-	} else if e.Platform.Status.Build.Registry.Insecure {
+	}
+
+	if e.Platform.Status.Build.Registry.Insecure {
 		args = append(args, "--insecure")
 		args = append(args, "--insecure-pull")
+
+		// We use these 2 flags to force Kaniko to try HTTP instead of HTTPS
+		args = append(args, "--skip-tls-verify")
+		args = append(args, "--skip-tls-verify-pull")
 	}
 
 	env = append(env, proxySecretEnvVars(e)...)