Uploaded image for project: 'OpenShift Pipelines'
  1. OpenShift Pipelines
  2. SRVKP-5565

ecosystem: s2i tasks don't work in disconnected clusters

XMLWordPrintable

      Description of problem:

      Clustertasks "s2i-" use images from image streams and have parameter VERSION so user can choose version of runtime and it works on disconnected clusters out of the box. New resolver tasks "s2i-" have hard-coded s2i builder image.

      Prerequisites (if any, like setup, operators/versions):

      Pipelines 1.15.0

      Steps to Reproduce

       # create pipeline and run it on disconnected

      apiVersion: tekton.dev/v1
      kind: Pipeline
      metadata:
        name: s2i-go-pipeline
      spec:
        params:
        - name: VERSION
          description: The tag of 'golang' imagestream for Go version
        workspaces:
        - name: source
        tasks:
        - name: clone-git-repo
          taskRef:
            resolver: cluster
            params:
            - name: kind
              value: task
            - name: name
              value: git-clone
            - name: namespace
              value: openshift-pipelines
          workspaces:
          - name: output
            workspace: source
          params:
          - name: URL
            value: https://github.com/chmouel/go-simple-uploader.git
          - name: REVISION
            value: e8e751f5e189ee493a43948b667f665f8d7e1057
          - name: DELETE_EXISTING
            value: "true"
        - name: build
          taskRef:
            resolver: cluster
            params:
            - name: kind
              value: task
            - name: name
              value: s2i-go
            - name: namespace
              value: openshift-pipelines
          runAfter: 
          - clone-git-repo
          workspaces:
          - name: source
            workspace: source
          params:
          - name: IMAGE
            value: image-registry.openshift-image-registry.svc:5000/$(context.pipelineRun.namespace)/s2i-go-$(params.VERSION)
          - name: TLSVERIFY
            value: "true"
          - name: VERSION
            value: $(params.VERSION)
          retries: 1
      

       

      Actual results:

      ---> Phase: Building the Dockerfile '/s2i-generate/Dockerfile.gen' with buildah...
      ---> Phase: Inspecting source workspace '/workspace/source' (PWD='/s2i-generate')...
      ---> Phase: Asserting the dockerfile/containerfile '/s2i-generate/Dockerfile.gen' exists...
      ---> Phase: Inspecting context '.'...
      ---> Phase: Building 'image-registry.openshift-image-registry.svc:5000/resolvertasks/s2i-go-latest' based on '/s2i-generate/Dockerfile.gen'...
      STEP 1/8: FROM registry.access.redhat.com/ubi8/go-toolset:1.20.12-5.1713833129
      Trying to pull registry.access.redhat.com/ubi8/go-toolset:1.20.12-5.1713833129...
      Error: creating build container: initializing source docker://registry.access.redhat.com/ubi8/go-toolset:1.20.12-5.1713833129: pinging container registry registry.access.redhat.com: Get "https://registry.access.redhat.com/v2/": Forbidden
      

      Expected results:

      Image is built

      Reproducibility (Always/Intermittent/Only Once):

      always on disconnected cluster

      Additional info (Such as Logs, Screenshots, etc):

      In order to make these tasks work on disconnected clusters out-of-the-box, we need to
      list builder image in relatedImages section of CSV so that it can be mirrored automatically with other operator images

              sashture Savita .
              ppitonak Pavol Pitoňák
              Pavol Pitoňák Pavol Pitoňák
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: