Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Private/Secured Docker Registry: Fails with error - x509: certificate signed by unknown authority #2633

Closed
ramukima opened this issue Aug 12, 2019 · 3 comments
Labels
area/build kind/bug Something isn't working priority/awaiting-more-evidence Lowest Priority. May be useful, but there is not yet enough supporting evidence.

Comments

@ramukima
Copy link

ramukima commented Aug 12, 2019

Expected behavior

Ability to work with a secured private docker registry

Actual behavior

Fails with error - x509: certificate signed by unknown authority

Information

  • Skaffold version: v0.34
  • Operating system: OSX Darwin
  • Contents of skaffold.yaml:
apiVersion: skaffold/v1beta13
kind: Config
build:
  artifacts:
    - image: <private-registry>/<org>/sample-image
      kaniko:
        flags:
        - --skip-tls-verify
        buildContext:
          localDir: {}
        cache: {}
  cluster:
    pullSecretName: e2esecret
    namespace: ramukima
    timeout: 15m
    dockerConfig:
      secretName: e2esecret
deploy:
  kubectl:
    manifests:
      - k8s-*

Steps to reproduce the behavior

Looking at the comments GoogleContainerTools/kaniko#169 (comment), I am not sure how to achieve the same using Skaffold.

ERROR:

INFO[0040] Taking snapshot of files...
2019/08/12 16:33:54 existing blob: sha256:5d20c808ce198565ff70b3ed23a991dd49afac45dece63474b27ce6ed036adc6
2019/08/12 16:33:54 pushed blob: sha256:09122320b650d56471912602eda322e12ea2abf6f30b0895e70a77c7dbeabf8d
2019/08/12 16:33:54 pushed blob: sha256:5e5a5673536343cb76edab6af522e63b06186f283d0cbbfeac424b4d22c51bea
2019/08/12 16:33:54 /:v0.26.0-104-g642f7f92-dirty: digest: sha256:b453224c5cb791139262e2cbff230287ada738d41ddb8f5def6f351b0257f3b2 size: 591
FATA[0055] failed to build: build failed: building [/]: kaniko build for [/]: getting image: Get https:///v2/: x509: certificate signed by unknown authority

Also, this issue #2217 looks like the one I am hitting except for the error is about TLS.

@balopat balopat added kind/bug Something isn't working priority/awaiting-more-evidence Lowest Priority. May be useful, but there is not yet enough supporting evidence. and removed kind/feature-request labels Aug 20, 2019
@balopat
Copy link
Contributor

balopat commented Aug 20, 2019

Thank you for filing the issue! I believe this should work if you have the right docker config setup.
Can you please try with different secretName?

@balopat
Copy link
Contributor

balopat commented Sep 9, 2019

We should also try to cover this in #2809

@tstromberg tstromberg changed the title Skaffold Kaniko builds with Private/Secured Docker Registry Private/Secured Docker Registry: Fails with error - x509: certificate signed by unknown authority Apr 20, 2020
@tstromberg
Copy link
Contributor

I'm closing this issue as it hasn't seen activity in awhile, and it's unclear if this issue still exists. If this issue does continue to exist in the most recent release of Skaffold, please feel free to add a comment and we'll re-open it.

If someone sees a similar issue, please create a new issue, but do include a link to this issue if possible.

Thank you for opening the issue!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/build kind/bug Something isn't working priority/awaiting-more-evidence Lowest Priority. May be useful, but there is not yet enough supporting evidence.
Projects
None yet
Development

No branches or pull requests

3 participants