Uploaded image for project: 'OpenShift Pipelines'
  1. OpenShift Pipelines
  2. SRVKP-1464

Task jib-maven fails on P & Z archs

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • Pipelines 1.4.1
    • Pipelines 1.4
    • Tekton Catalog
    • None
    • False
    • False
    • Undefined
    • Pipelines Sprint 200

      Similar to SRVKP-1436 but observed on P and Z only.

       

      Expected behavior

      Pipeline using jib-maven pushing to internal OpenShift registry with a self-signed certificate works out of the box.

      Actual behavior

      Pipeline fails on certificate validation

      [root@pli43 cluster-tasks-tests]# oc logs jib-maven-run-92784-build-h9vfh-pod-gzv4n
      error: a container name must be specified for pod jib-maven-run-92784-build-h9vfh-pod-gzv4n, choose one of: [step-build-and-push step-digest-to-results] or one of the init containers: [place-scripts working-dir-initializer place-tools]
      [root@pli43 cluster-tasks-tests]# oc logs jib-maven-run-92784-build-h9vfh-pod-gzv4n -c step-build-and-push
      /tekton/scripts/script-0-cpg4h: 3: [[: not found
      OpenJDK 64-Bit Server VM warning: You have loaded library /usr/share/maven/lib/jansi-native/linux64/libjansi.so which might have disabled stack guard. The VM will try to fix the stack guard now.
      It's highly recommended that you fix the library with 'execstack -c <libfile>', or link it with '-z noexecstack'.
      [INFO] Scanning for projects...
      [INFO] Downloading from central: https://repo.maven.apache.org/maven2/com/google/cloud/tools/jib-maven-plugin/maven-metadata.xml
      [INFO] Downloaded from central: https://repo.maven.apache.org/maven2/com/google/cloud/tools/jib-maven-plugin/maven-metadata.xml (2.0 kB at 9.4 kB/s)
      ..
      ..
      ..
      [INFO] Downloaded from central: https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-component-annotations/2.1.0/plexus-component-annotations-2.1.0.jar (4.2 kB at 8.2 kB/s)
      [INFO] Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/maven/shared/maven-shared-utils/3.2.1/maven-shared-utils-3.2.1.jar (167 kB at 320 kB/s)
      [INFO] Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/commons/commons-lang3/3.8.1/commons-lang3-3.8.1.jar (502 kB at 942 kB/s)
      [INFO]
      [INFO] Containerizing application to image-registry.openshift-image-registry.svc:5000/catalog-tests/jib-maven...
      [WARNING] Base image 'adoptopenjdk:8-jre' does not use a specific image digest - build may not be reproducible
      [INFO] Getting manifest for base image adoptopenjdk:8-jre...
      [INFO] Building resources layer...
      [INFO] Building classes layer...
      [INFO] Using credentials from Docker config (/tekton/creds/.docker/config.json) for image-registry.openshift-image-registry.svc:5000/catalog-tests/jib-maven
      [ERROR] I/O error for image [image-registry.openshift-image-registry.svc:5000/catalog-tests/jib-maven]:
      [ERROR]     javax.net.ssl.SSLHandshakeException
      [ERROR]     PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      [INFO] The base image requires auth. Trying again for adoptopenjdk:8-jre...
      [INFO]
      [INFO] ------------------------------------------------------------------------
      [INFO] BUILD FAILURE
      [INFO] ------------------------------------------------------------------------
      [INFO] Total time:  8.428 s
      [INFO] Finished at: 2021-04-15T09:25:13Z
      [INFO] ------------------------------------------------------------------------
      [ERROR] Failed to execute goal com.google.cloud.tools:jib-maven-plugin:3.0.0:build (default-cli) on project console-java-simple: 429 Too Many Requests
      [ERROR] GET https://registry-1.docker.io/v2/library/adoptopenjdk/manifests/8-jre
      [ERROR] {
      [ERROR]   "errors": [
      [ERROR]     {
      [ERROR]       "code": "TOOMANYREQUESTS",
      [ERROR]       "message": "You have reached your pull rate limit. You may increase the limit by authenticating and upgrading: https://www.docker.com/increase-rate-limit"
      [ERROR]     }
      [ERROR]   ]
      [ERROR] }
      [ERROR] -> [Help 1]
      [ERROR]
      [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
      [ERROR] Re-run Maven using the -X switch to enable full debug logging.
      [ERROR]
      [ERROR] For more information about the errors and possible solutions, please read the following articles:
      [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException

      Steps to reproduce

      git clone https://github.com/ppitonak/cluster-tasks-tests.git
      cd cluster-tasks-tests
      git checkout release-1.4
      ./demo prepare
      ./demo test jib-maven

      Notes

      • simple workaround is to set INSECUREREGISTRY=true in task params

              piyushgarg001 Piyush Garg
              sjunawan Shivani Junawane (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: