Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Push to insecure registry fails when using Kaniko build strategy #2127

Closed
orpiske opened this issue Mar 15, 2021 · 1 comment
Closed

Push to insecure registry fails when using Kaniko build strategy #2127

orpiske opened this issue Mar 15, 2021 · 1 comment
Assignees
Labels
kind/bug Something isn't working

Comments

@orpiske
Copy link
Contributor

orpiske commented Mar 15, 2021

This is similar to the issue I reported on #2122, but involves one more item.

In addition to the items reported on the aforementioned issue, the push also fails because Kaniko itself assumes https. A simple work-around for this is setting the flags --skip-tls-verify and --skip-tls-verify-pull. They force Kaniko to use the HTTP protocol when talking to the registry.

DEBU[0000] Copying file /builder/kit-c17mger67bimpfkia980/context/Dockerfile to /kaniko/Dockerfile 
error checking push permissions -- make sure you entered the correct tag name, and that you are authenticated correctly, and try again: checking push permission for "my-insecure-registry-with-no-https.com/opiske/camel-k-kit-c17mger67bimpfkia980:380084": creating push check transport for k3s-node-master.usersys.redhat.com failed: Get https://my-insecure-registry-with-no-https.com/v2/: x509: certificate has expired or is not yet valid

I have a fix in place and will open a PR with a proposed fix soon.

@astefanutti
Copy link
Member

Fixes with #2130. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants