-
Notifications
You must be signed in to change notification settings - Fork 174
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Zarf init support external registry but doesn't accept any insecure flag for registry #1190
Comments
Update: I have added support for insecure flag in zarf init. I will raise PR very shortly for review. ImgConfig has information of external registry but while pushing it is trying to push to default registry without registry replacement. This issue is still reproducible in v0.23.3 which was released yesterday. Probably external registry support is completely broken in v0.23.0 to v0.23.3 as image can't be pushed to the external repo. |
Update: Found the root cause of regression issue, It seems assigning external registry url (https://github.com/defenseunicorns/zarf/blob/v0.22.2/src/internal/images/push.go#L25) is missing in v0.23.3. Will create PR with the fix. |
Migrated from #1191 ## Description Adding support for insecure flag for external registry in `zarf init`. Fixing `zarf package create` and `zarf package deploy` failures with external self signed cert registry as mentioned in #1190 and #1181 ## Related Issue Fixes # #1190 Fixes # #1181 Fixes # #561 Fixes # #1015 --------- Co-authored-by: Rishi <[email protected]>
Fixed in #1280 |
Migrated from #1191 ## Description Adding support for insecure flag for external registry in `zarf init`. Fixing `zarf package create` and `zarf package deploy` failures with external self signed cert registry as mentioned in #1190 and #1181 ## Related Issue Fixes # #1190 Fixes # #1181 Fixes # #561 Fixes # #1015 --------- Co-authored-by: Rishi <[email protected]>
Context
We are trying to leverage an external registry that has a self-signed certificate while deploying package via zarf but while doing zarf init, zarf-agent images doesn't gets uploaded to registry and it throws 'Certifficate Signed by unknown authority'. Also zarf init doesn't accept --insecure flag for registry.
In version 0.22.0 zarf init operation with internal registry wasn't failing even if image push fails. This seems to be a new behavior in v0.23.0, possibly because refactor in image push changes, which is the right behavior.
Environment
Device and OS: MacOS, Ubuntu22.04
App version: 0.23.3
Kubernetes distro being used:
Other:
Steps to reproduce
zarf init --registry-push-password=abcd --registry-push-username=abcd --registry-url=abcd.registry.local
and abcd.registry.local is a local registry with the self-signed certificate.Expected result
Images in init package should get uploaded to external registry and zarf init should get completed successfully.
Actual Result
Visual Proof (screenshots, videos, text, etc)
Severity/Priority
4 (on scale of 1-5)
Additional Context
Building a zarf package using images from a self-signed registry also fails. There are open issues #561 and #1015 for creating package from self signed repo.
The text was updated successfully, but these errors were encountered: