Skip to content
This repository has been archived by the owner on Aug 2, 2023. It is now read-only.

Bug: add a task of automatically linking the secret to sa during the pipeline run #273

Open
tkulik opened this issue Mar 21, 2020 · 1 comment
Assignees
Labels
bug Something isn't working enhancement New feature or request

Comments

@tkulik
Copy link

tkulik commented Mar 21, 2020

In order to use a private registry, the registry secret must be linked to the service account that will deploy the application.

oc -n kabanero secrets link <service-account> my-registry --for=pull,mount

However, today the pipeline doesn't automatically do this so the resulting pod fails with ImagePullBackOff errors until Todd manually find the correct SA, applies the link, and deletes the pod.

To Reproduce
Steps to reproduce the behavior:

  1. Follow these instructions for private registry:
    https://www.ibm.com/support/knowledgecenter/SSCSJL_4.1.x/settingup.html
  2. Then deploy some app using these newly created stacks using appsody.
  3. Result: the pod is in ImagePullBackOff state.
  4. To fix this problem:
    1. find the Service Account for the application by looking in the pod yaml,
    2. run this cmd:
      oc -n kabanero secrets link <service-account> my-registry --for=pull,mount
    3. Delete the pod and it will get regenerated.

After this the application works. We need a better solution, this seems just a workaroud. Perhaps we can automatically link the secret to serviceAccount during the pipeline run.

@tkulik tkulik added bug Something isn't working enhancement New feature or request labels Mar 22, 2020
@marikaj123
Copy link
Member

Hi @kvijai82 - Please help to find the appropriate owner and assign a release to the this issue. Thank you.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug Something isn't working enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants