Lukasz Gajowy created BEAM-7381:
-----------------------------------
Summary: Connecting to Google Container Registry from Jenkins
workers
Key: BEAM-7381
URL: https://issues.apache.org/jira/browse/BEAM-7381
Project: Beam
Issue Type: Wish
Components: testing
Reporter: Lukasz Gajowy
Assignee: yifan zou
I'm working on [running Portable Python Load
tests|https://github.com/apache/beam/pull/8636] on our existing Flink Dataproc
infrastructure. To run the tests on the freshest version of SDK harnesses and
Job servers, I want to be able to push/pull those images to/from Google
Container Registry in apache-beam-testing project. However, I can't connect to
the registry - I got the following error message while pushing the images:
{code:java}
unauthorized: You don't have the needed permissions to perform this operation,
and you may have invalid credentials. To authenticate your request, follow the
steps in:
https://cloud.google.com/container-registry/docs/advanced-authentication {code}
(see more here:
[https://builds.apache.org/job/beam_LoadTests_Python_GBK_Flink_Batch_PR/5/console]
)
From what I know, the best way to deal with this is to install the [standalone
docker
credential|https://cloud.google.com/container-registry/docs/advanced-authentication#standalone_docker_credential_helper]
helper on workers. It would then provide possibility to authenticate every
time Jenkins jobs need to push/pull images.
I seem to not have permissions to install this tool on workers - if my
reasoning is correct, can we install this?
I specifically mean running this:
{code:java}
gcloud components install docker-credential-gcr{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
