[ 
https://issues.apache.org/jira/browse/BEAM-7381?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16845202#comment-16845202
 ] 

yifan zou commented on BEAM-7381:
---------------------------------

[~ŁukaszG] I've installed the docker credential helper on the experimental 
worker. Would you please verify whether it works properly?

The helper is installed on beam17-jnlp. You can limit your test on the agent 
group 'beam-test', so that the jenkins master will assign the job to that 
worker.

Change the setTopLevelMainJobProperties in the{color:#333333} 
_+[job_LoadTests_GBK_Flink_Python.groov|https://github.com/apache/beam/pull/8636/files#diff-9d326c3b529b7a549f0e7432f872ddbd]y+_{color}
 to the clause below, run seed job then run your test: 
{code:java}
commonJobProperties.setTopLevelMainJobProperties(delegate, 'master', 240, true, 
'beam-test'){code}
After verifying the docker authentication, I need to create a new image and 
deploy it to our agents.

 

> Connecting to Google Container Registry from Jenkins workers
> ------------------------------------------------------------
>
>                 Key: BEAM-7381
>                 URL: https://issues.apache.org/jira/browse/BEAM-7381
>             Project: Beam
>          Issue Type: Wish
>          Components: testing
>            Reporter: Lukasz Gajowy
>            Assignee: yifan zou
>            Priority: Major
>
> I'm working on [running Portable Python Load 
> tests|https://github.com/apache/beam/pull/8636] on our existing Flink 
> Dataproc infrastructure. To run the tests on the freshest version of SDK 
> harnesses and Job servers, I want to be able to push/pull those images 
> to/from Google Container Registry in apache-beam-testing project. However, I 
> can't connect to the registry - I got the following error message while 
> pushing the images:
>   
> {code:java}
> unauthorized: You don't have the needed permissions to perform this 
> operation, and you may have invalid credentials. To authenticate your 
> request, follow the steps in: 
> https://cloud.google.com/container-registry/docs/advanced-authentication 
> {code}
>  
>  (see more here: 
> [https://builds.apache.org/job/beam_LoadTests_Python_GBK_Flink_Batch_PR/5/console]
>  )
>   
>  From what I know, the best way to deal with this is to install the 
> [standalone docker 
> credential|https://cloud.google.com/container-registry/docs/advanced-authentication#standalone_docker_credential_helper]
>  helper on workers. It would then provide possibility to authenticate every 
> time Jenkins jobs need to push/pull images. 
> I seem to not have permissions to install this tool on workers - if my 
> reasoning is correct, can we install this?
> I specifically mean running this:
> {code:java}
> gcloud components install docker-credential-gcr{code}
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to