okd-project / okd

The self-managing, auto-upgrading, Kubernetes distribution for everyone

Home Page:https://okd.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Fix bypass for pull-secret

sapkra opened this issue · comments

Like it's described in the README a bypass is needed for the pull-secret. This should be fixed - if it is already the README should be changed.

I've added this issue because I think it is important for the stable release and it has to be documented so that no one will forget about it. The (fix coming soon) comment in the README was added in November last year.

Unfortunately we'd have to ship GA with this workaround ({"auths":{"fake":{"auth": "bar"}}}) due to lack of time to prepare a fix which can be merged upstream

#264 has a better description of the same problem

using this pull secret... {"auths":{"fake":{"auth": "bar"}}} i now have problems with my s2i build config.

Cloning "git@github.com:jkassis/xxxxx.git" ... Commit: f55bf64db1ce4366eb8319f8a507e6cc5f114216 (working on s2i build) Author: Jeremy Kassis <jkassis@gmail.com> Date: Mon Jul 27 17:53:51 2020 -0700 Caching blobs under "/var/cache/blobs". E0728 04:28:56.827076 1 config.go:236] while trying to parse blob "{\"auths\":{\"fake\":{\"auth\":\"bar\"}}}\n": unable to parse auth field Warning: Pull failed, retrying in 5s ... E0728 04:29:02.732065 1 config.go:236] while trying to parse blob "{\"auths\":{\"fake\":{\"auth\":\"bar\"}}}\n": unable to parse auth field Warning: Pull failed, retrying in 5s ... E0728 04:29:08.762960 1 config.go:236] while trying to parse blob "{\"auths\":{\"fake\":{\"auth\":\"bar\"}}}\n": unable to parse auth field Warning: Pull failed, retrying in 5s ... error: build error: After retrying 2 times, Pull image still failed due to error: errors: denied: requested access to the resource is denied unauthorized: authentication required

image

i changed the content of -n openshift-config secret/pull-secret but this error continues to raise. oc set data secret/pull-secret -n openshift-config --from-file=.dockerconfigjson=/Users/jkassis/.docker/config.json

changing the pull-secret actually did change this message. it just took a while to propagate.