For any looking at this at some later point, there is some conversation here: https://github.com/gocd/kubernetes-elastic-agents/issues/138
Cheers, Aravind On Tue, Sep 10, 2019 at 09:37:17 -0700, Maxim Shaev wrote: > Hello, > > Does anybody know how to solve the issue with expired certificate for > docker pulling in the agent? > I got an error: > > [go] Task: /bin/bash -c "docker-compose build"took: 0.429sexited: 1 > nginx uses an image, skipping > Building app > Step 1/22 : FROM php:7.2-fpm-alpine3.8 > Service 'app' failed to build: Get https://registry-1.docker.io/v2/: x509: > certificate has expired or is not yet valid > > I cannot find any certificates in the agent container. According to the > docker dind documentation, they should be in /certs directory > https://hub.docker.com/_/docker#tls > > Starting in 18.09+, the dind variants of this image will automatically > > generate TLS certificates in the directory specified by the > > DOCKER_TLS_CERTDIR environment variable. > > > Stack of versioning tools: > GoCD - *19.7.0* installing through helm to k8s cluster > Kubernetes Elastic Agent Plugin - *3.0.0-156* > - based on gocd/gocd-agent-docker-dind:v19.7.0 > - In the agent container Docker version *19.03.1*, build 74b1e89e8a > > Any thoughts? > Probably I need to generate certificates and map to the volume? > > -- > You received this message because you are subscribed to the Google Groups > "go-cd" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/go-cd/07075d84-588b-46a4-9b24-05d2d157ca7f%40googlegroups.com. -- You received this message because you are subscribed to the Google Groups "go-cd" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/go-cd/20190911161418.cvinzqbkui3v6tev%40arvindsv.com.
