Uploaded image for project: 'OpenShift Pipelines'
  1. OpenShift Pipelines
  2. SRVKP-1771

Jib-maven task: permission denied while adding certs to keystore

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • Pipelines 1.6
    • Pipelines 1.6
    • Tekton Catalog
    • None
    • 3
    • False
    • False
    • Pipelines Sprint 209

      Expected behavior

      Jib-maven task works out of the box

      Actual behavior

      Task generate following message at the beginning

      Warning: use -cacerts option to access cacerts keystore
      Certificate was added to keystore
      keytool error: java.io.FileNotFoundException: /usr/java/openjdk-14/lib/security/cacerts (Permission denied)
      

      Steps to reproduce

      create a pipeline

      apiVersion: tekton.dev/v1beta1
      kind: Pipeline
      metadata:
        name: jib-maven-pipeline
      spec:
        params:
        - name: SUBDIR
          description: where to clone the git repo
          default: jib-maven
        workspaces:
        - name: source
        tasks:
        - name: clone-git-repo
          taskRef:
            name: git-clone
            kind: ClusterTask
          workspaces:
          - name: output
            workspace: source
          params:
          - name: url
            value: https://github.com/che-samples/console-java-simple
          - name: subdirectory
            value: $(params.SUBDIR)
          - name: deleteExisting
            value: "true"
        - name: build
          taskRef:
            name: jib-maven
            kind: ClusterTask
          runAfter:
          - clone-git-repo
          workspaces:
          - name: source
            workspace: source
          params:
          - name: DIRECTORY
            value: $(params.SUBDIR)
          - name: IMAGE
            value: image-registry.openshift-image-registry.svc:5000/$(context.pipelineRun.namespace)/jib-maven
          - name: INSECUREREGISTRY
            value: "false"
          - name: MAVEN_IMAGE
            value: gcr.io/cloud-builders/mvn@sha256:57523fc43394d6d9d2414ee8d1c85ed7a13460cbb268c3cd16d28cfb3859e641
      

      create a pipeline run

      apiVersion: tekton.dev/v1beta1
      kind: PipelineRun
      metadata:
        generateName: jib-maven-run-
      spec:
        pipelineRef:
          name: jib-maven-pipeline
        workspaces:
        - name: source
          persistentVolumeClaim:
            claimName: shared-pvc
        timeout: 15m
      

            Unassigned Unassigned
            ppitonak Pavol Pitoňák
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: