[JIRA] (JENKINS-58837) withDockerRegistry on multiple clusters

29 views
Skip to first unread message

clarkster82@gmail.com (JIRA)

unread,
Aug 6, 2019, 11:32:03 PM8/6/19
to jenkinsc...@googlegroups.com
Paul Clark created an issue
 
Jenkins / Bug JENKINS-58837
withDockerRegistry on multiple clusters
Issue Type: Bug Bug
Assignee: Nicolas De Loof
Components: docker-commons-plugin, docker-plugin, openshift-client-plugin
Created: 2019-08-07 03:31
Priority: Minor Minor
Reporter: Paul Clark

Following instructions on https://github.com/openshift/jenkins-client-plugin#moving-images-cluster-to-cluster, I am unable to promote the image between two openshift clusters as it throws an authentication issue.

Adding a sleep after the two withDockerRegistry calls, I can see that two folders are created under the <jobname>@TMP directory (unique names for each) with a config.json under each of them - these contain the authentication details to the respective registries.

 

Docker-commons-plugin version: 1.15

Docker plugin version: 1.1.7

Openshift Client plugin version: 1.0.31 (openshift client and docker registry version: 3.7.119)

Jenkins: 2.176.2

 
[Pipeline] { (Copy from source to dest)[Pipeline] script[Pipeline] {[Pipeline] withDockerRegistry$ docker login -u openshift/skopeo -p ******** https://docker-registry-default.<redacted>Login Succeeded[Pipeline] {[Pipeline] withDockerRegistry$ docker login -u ci-cd/jenkins -p ******** https://docker-registry.<redacted>Login Succeeded[Pipeline]

{[Pipeline] sh+ /bin/oc image mirror --insecure=true docker-registry.<redacted>/appversion/appversion:latest docker-registry-default.<redacted>/appversion/appversion:latest error: unable to retrieve source image docker-registry.<redacted>/appversion/appversion by tag: unauthorized: authentication required[Pipeline] }

[Pipeline] // withDockerRegistry[Pipeline] }[Pipeline] // withDockerRegistry[Pipeline] }[Pipeline] // script[Pipeline] }[Pipeline] // stage[Pipeline] }[Pipeline] // withEnv[Pipeline] }[Pipeline] // node
 

Add Comment Add Comment
 
This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

clarkster82@gmail.com (JIRA)

unread,
Aug 6, 2019, 11:37:02 PM8/6/19
to jenkinsc...@googlegroups.com
Paul Clark updated an issue
Change By: Paul Clark
Following instructions on [https://github.com/openshift/jenkins-client-plugin#moving-images-cluster-to-cluster], I am unable to promote the image between two openshift clusters as it throws an authentication issue.


Adding a sleep after the two withDockerRegistry calls, I can see that two folders are created under the <jobname>@TMP directory (unique names for each) with a config.json under each of them - these contain the authentication details to the respective registries.

 

Docker-commons-plugin version: 1.15

Docker plugin version: 1.1.7

Openshift Client plugin version: 1.0.31 (openshift client and docker registry version: 3.7.119)

Jenkins: 2.176.2

 
{code:java}
[Pipeline] { (Copy from source to dest)
[Pipeline] script
[Pipeline] {
[Pipeline] withDockerRegistry
$ docker login -u openshift/skopeo -p ******** [ https://docker-registry-default.<redacted> |https://docker-registry-default.infra.ocp-reg.hbs.net.au/]
Login Succeeded
[Pipeline] {
[Pipeline] withDockerRegistry
$ docker login -u ci-cd/jenkins -p ******** [ https://docker-registry.<redacted> |https://docker-registry.apps.ocp-tst.hbs.net.au/]
Login Succeeded
[Pipeline] {
[Pipeline] sh
+ /bin/oc image mirror --insecure=true docker-registry.<redacted>/appversion/appversion:latest docker-registry-default.<redacted>/appversion/appversion:latest
error: unable to retrieve source image docker-registry.<redacted>/appversion/appversion by tag: unauthorized: authentication required

[Pipeline] }
[Pipeline] // withDockerRegistry
[Pipeline] }
[Pipeline] // withDockerRegistry
[Pipeline] }
[Pipeline] // script
[Pipeline] }
[Pipeline] // stage
[Pipeline] }
[Pipeline] // withEnv
[Pipeline] }
[Pipeline] // node
  [Pipeline] End of Pipeline
ERROR: script returned exit code 1
Finished: FAILURE
{code}

serggladskikh@yandex.ru (JIRA)

unread,
Aug 26, 2019, 12:01:01 PM8/26/19
to jenkinsc...@googlegroups.com
Sergey Gladskih commented on Bug JENKINS-58837
 
Re: withDockerRegistry on multiple clusters

Today I faced exactly the same bug. At least it's not the problem of Windows agent that I use. Did you find some workaround (except traditional pull + push)?

serggladskikh@yandex.ru (JIRA)

unread,
Aug 26, 2019, 12:02:01 PM8/26/19
to jenkinsc...@googlegroups.com
Sergey Gladskih edited a comment on Bug JENKINS-58837
Today I faced exactly the same bug. At least it's not the a problem of Windows agent that I use. Did you find some workaround (except traditional pull + push)?

clarkster82@gmail.com (JIRA)

unread,
Aug 26, 2019, 3:45:07 PM8/26/19
to jenkinsc...@googlegroups.com

Workaround:
Command line docket logins, do the image mirror and then Docker logouts
Post pipeline always to empty out the docker config.json.

Not the best as any other pipelines running at the same time for cluster promotions on that node would have issues

pjdarton@gmail.com (JIRA)

unread,
Sep 24, 2019, 8:22:02 AM9/24/19
to jenkinsc...@googlegroups.com
pjdarton updated an issue
Change By: pjdarton
Component/s: docker-workflow-plugin
Component/s: docker-plugin
This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f)
Atlassian logo

pjdarton@gmail.com (JIRA)

unread,
Sep 24, 2019, 8:24:03 AM9/24/19
to jenkinsc...@googlegroups.com
pjdarton commented on Bug JENKINS-58837

FYI withDockerRegistry etc come from the docker-workflow-plugin, not the docker-plugin. I've updated the components field accordingly.

Reply all
Reply to author
Forward
0 new messages