Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-57802

Openshift Pipelines Read Permissions Error When Using Git-Clone Task

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • Moderate
    • Yes
    • rhel-se-platform-tools
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

          When using openshift pipelines operator version 1.18, a nfs volume claim template, and the git-clone task, the git-clone task will fail saying that git does not have read access to the tmp file made from the git clone command (The exact error will be in the additional info section).

      Version-Release number of selected component (if applicable):

          1.17.0, 1.18.0, 1.18.1

      How reproducible:

          Easily Reproducible

      Steps to Reproduce:

          1. create a pipeline with a git-clone task (one I used will be in the additional
             resources. 
          2. have a nfs volume claim template
          3. run the pipeline that was created where it uses the nfs volume claim template
             as the storage class. 1GiB in size and with RWX access 
          

      Actual results:

           pipelinerun status is Failed

      Expected results:

           pipelinerun status is Succeeded

      Additional info:

          Error:
          
      ---> Phase:
      Cloning 'https://github.ibm.com/LinuxCoC/Acme-Air-3.0.git'
      into '/workspace/output/'...
      
      + exec git-init -url=https://github.ibm.com/LinuxCoC/Acme-Air-3.0.git
      -revision=MQ_SorinDev -refspec= -path=/workspace/output/ -sslVerify=true
      -submodules=true -depth=1 -sparseCheckoutDirectories=
      
      {"level":"error","ts":1750252472.8877683,"caller":"git/git.go:53","msg":"Error
      running git [remote get-url origin]: exit status 2\nerror: No such remote
      'origin'\n","stacktrace":"github.com/tektoncd-catalog/git-clone/git-init/git.run\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/git/git.go:53\ngithub.com/tektoncd-catalog/git-clone/git-init/git.Fetch\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/git/git.go:109\nmain.main\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/main.go:52\nruntime.main\n\t/usr/lib/golang/src/runtime/proc.go:272"}
      
      {"level":"error","ts":1750252691.475017,"caller":"git/git.go:53","msg":"Error
      running git [fetch --recurse-submodules=yes --depth=1 origin --update-head-ok
      --force MQ_SorinDev]: exit status 128\nerror: RPC failed; HTTP 504 curl 22 The
      requested URL returned error: 504\nfatal: expected
      'packfile'\n","stacktrace":"github.com/tektoncd-catalog/git-clone/git-init/git.run\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/git/git.go:53\ngithub.com/tektoncd-catalog/git-clone/git-init/git.Fetch\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/git/git.go:166\nmain.main\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/main.go:52\nruntime.main\n\t/usr/lib/golang/src/runtime/proc.go:272"}
      
      {"level":"fatal","ts":1750252691.475138,"caller":"git-init/main.go:53","msg":"Error
      fetching git repository: failed to fetch [MQ_SorinDev]: exit status
      128","stacktrace":"main.main\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/main.go:53\nruntime.main\n\t/usr/lib/golang/src/runtime/proc.go:272"}
      
      
      
          pipeline yaml:
          
      
      apiVersion: tekton.dev/v1
      
      kind: Pipeline
      
      metadata:
      
        creationTimestamp: '2025-06-16T16:10:34Z'
      
        generation: 4
      
        managedFields:
      
          - apiVersion: tekton.dev/v1
      
            fieldsType: FieldsV1
      
            fieldsV1:
      
              'f:spec':
      
                .: {}
      
                'f:tasks': {}
      
                'f:workspaces': {}
      
            manager: Mozilla
      
            operation: Update
      
            time: '2025-06-17T14:02:19Z'
      
        name: git-clone
      
        namespace: acmeair-project
      
        resourceVersion: '135906972'
      
        uid: 5efd0a16-792d-40c6-9cf2-0561b9c7a9dd
      
      spec:
      
        tasks:
      
          - name: clone
      
            params:
      
              - name: URL
      
                value: 'https://github.ibm.com/LinuxCoC/Acme-Air-3.0.git'
      
              - name: REVISION
      
                value: MQ_SorinDev
      
              - name: DELETE_EXISTING
      
                value: 'true'
      
            taskRef:
      
              params:
      
                - name: kind
      
                  value: task
      
                - name: name
      
                  value: git-clone
      
                - name: namespace
      
                  value: openshift-pipelines
      
              resolver: cluster
      
            workspaces:
      
              - name: output
      
                workspace: shared-ws
      
        workspaces:
      
          - name: shared-ws
      
      Notes:
      
           I changed the volume claim template to a ceph fs and the git-clone ran with no issues and produced a successful run. While doing testing with nfs it would only produce the error above but one time it got past the file permissions but still produced a error (RPC failed; HTTP 504 curl 22 The requested URL returned error: 504\nfatal)

              Unassigned Unassigned
              sorin022 Sorin Macaluso (Inactive)
              None
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: