-
Bug
-
Resolution: Done
-
Major
-
Pipelines 1.4
-
None
-
False
-
False
-
Undefined
-
-
Pipelines Sprint 200
Similar to SRVKP-1436 but observed on P and Z only.
Expected behavior
Pipeline using jib-maven pushing to internal OpenShift registry with a self-signed certificate works out of the box.
Actual behavior
Pipeline fails on certificate validation
[root@pli43 cluster-tasks-tests]# oc logs jib-maven-run-92784-build-h9vfh-pod-gzv4n error: a container name must be specified for pod jib-maven-run-92784-build-h9vfh-pod-gzv4n, choose one of: [step-build-and-push step-digest-to-results] or one of the init containers: [place-scripts working-dir-initializer place-tools] [root@pli43 cluster-tasks-tests]# oc logs jib-maven-run-92784-build-h9vfh-pod-gzv4n -c step-build-and-push /tekton/scripts/script-0-cpg4h: 3: [[: not found OpenJDK 64-Bit Server VM warning: You have loaded library /usr/share/maven/lib/jansi-native/linux64/libjansi.so which might have disabled stack guard. The VM will try to fix the stack guard now. It's highly recommended that you fix the library with 'execstack -c <libfile>', or link it with '-z noexecstack'. [INFO] Scanning for projects... [INFO] Downloading from central: https://repo.maven.apache.org/maven2/com/google/cloud/tools/jib-maven-plugin/maven-metadata.xml [INFO] Downloaded from central: https://repo.maven.apache.org/maven2/com/google/cloud/tools/jib-maven-plugin/maven-metadata.xml (2.0 kB at 9.4 kB/s) .. .. .. [INFO] Downloaded from central: https://repo.maven.apache.org/maven2/org/codehaus/plexus/plexus-component-annotations/2.1.0/plexus-component-annotations-2.1.0.jar (4.2 kB at 8.2 kB/s) [INFO] Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/maven/shared/maven-shared-utils/3.2.1/maven-shared-utils-3.2.1.jar (167 kB at 320 kB/s) [INFO] Downloaded from central: https://repo.maven.apache.org/maven2/org/apache/commons/commons-lang3/3.8.1/commons-lang3-3.8.1.jar (502 kB at 942 kB/s) [INFO] [INFO] Containerizing application to image-registry.openshift-image-registry.svc:5000/catalog-tests/jib-maven... [WARNING] Base image 'adoptopenjdk:8-jre' does not use a specific image digest - build may not be reproducible [INFO] Getting manifest for base image adoptopenjdk:8-jre... [INFO] Building resources layer... [INFO] Building classes layer... [INFO] Using credentials from Docker config (/tekton/creds/.docker/config.json) for image-registry.openshift-image-registry.svc:5000/catalog-tests/jib-maven [ERROR] I/O error for image [image-registry.openshift-image-registry.svc:5000/catalog-tests/jib-maven]: [ERROR] javax.net.ssl.SSLHandshakeException [ERROR] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target [INFO] The base image requires auth. Trying again for adoptopenjdk:8-jre... [INFO] [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILURE [INFO] ------------------------------------------------------------------------ [INFO] Total time: 8.428 s [INFO] Finished at: 2021-04-15T09:25:13Z [INFO] ------------------------------------------------------------------------ [ERROR] Failed to execute goal com.google.cloud.tools:jib-maven-plugin:3.0.0:build (default-cli) on project console-java-simple: 429 Too Many Requests [ERROR] GET https://registry-1.docker.io/v2/library/adoptopenjdk/manifests/8-jre [ERROR] { [ERROR] "errors": [ [ERROR] { [ERROR] "code": "TOOMANYREQUESTS", [ERROR] "message": "You have reached your pull rate limit. You may increase the limit by authenticating and upgrading: https://www.docker.com/increase-rate-limit" [ERROR] } [ERROR] ] [ERROR] } [ERROR] -> [Help 1] [ERROR] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven using the -X switch to enable full debug logging. [ERROR] [ERROR] For more information about the errors and possible solutions, please read the following articles: [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
Steps to reproduce
git clone https://github.com/ppitonak/cluster-tasks-tests.git
cd cluster-tasks-tests
git checkout release-1.4
./demo prepare
./demo test jib-maven
Notes
- simple workaround is to set INSECUREREGISTRY=true in task params