Uploaded image for project: 'OpenShift Pipelines'
  1. OpenShift Pipelines
  2. SRVKP-9439

TUF mirror url failure during the x509 signer initialization

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • Pipelines 1.20.0
    • Tekton Pipelines
    • False
    • Hide

      None

      Show
      None
    • False

      Description of problem:
      When `signers.x509.tuf.mirror.url` is configured to point to the TUF server which is provided by the Trusted Artifact Signer operator, 
      the Tekton Chains logs the following error: "error configuring x509 signer: initialize tuf: creating cached local store: mkdir /.sigstore: read-only file system".

      This occurs durring the x509 signer initialization and prevents Chains from using the TUF mirror.

      Workaround: 
       
       A workaround have been to use default value, (https://sigstore-tuf-root.storage.googleapis.com)

      Prerequisites (if any, like setup, operators/versions):

      Red hat Openshift Pipelines version 1.20.0
      Red Hat Trusted Artifact Signer version 1.2.1 
      Red Hat Build of Keycloak Operator version 26.4.4-opr.1

      Reproducibility (Always/Intermittent/Only Once):
      Always

              Unassigned Unassigned
              rhn-support-dtambat Darshan Tambat
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: