[ 
https://issues.apache.org/jira/browse/BEAM-7381?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16845290#comment-16845290
 ] 

Lukasz Gajowy commented on BEAM-7381:
-------------------------------------

Thanks [~yifanzou]. I ran the job again and used docker-credential-gcr. I was 
able to successfully push the images to gcr in [this 
job|https://builds.apache.org/job/beam_LoadTests_Python_GBK_Flink_Batch_PR/8/console]
 so this solved my issue (it failed due to other, non related problems). LMK 
when you update the agents. Thanks!

 

PS: It's super cool that we have the agents on GCP now. :) 

 

> Connecting to Google Container Registry from Jenkins workers
> ------------------------------------------------------------
>
>                 Key: BEAM-7381
>                 URL: https://issues.apache.org/jira/browse/BEAM-7381
>             Project: Beam
>          Issue Type: Wish
>          Components: testing
>            Reporter: Lukasz Gajowy
>            Assignee: yifan zou
>            Priority: Major
>
> I'm working on [running Portable Python Load 
> tests|https://github.com/apache/beam/pull/8636] on our existing Flink 
> Dataproc infrastructure. To run the tests on the freshest version of SDK 
> harnesses and Job servers, I want to be able to push/pull those images 
> to/from Google Container Registry in apache-beam-testing project. However, I 
> can't connect to the registry - I got the following error message while 
> pushing the images:
>   
> {code:java}
> unauthorized: You don't have the needed permissions to perform this 
> operation, and you may have invalid credentials. To authenticate your 
> request, follow the steps in: 
> https://cloud.google.com/container-registry/docs/advanced-authentication 
> {code}
>  
>  (see more here: 
> [https://builds.apache.org/job/beam_LoadTests_Python_GBK_Flink_Batch_PR/5/console]
>  )
>   
>  From what I know, the best way to deal with this is to install the 
> [standalone docker 
> credential|https://cloud.google.com/container-registry/docs/advanced-authentication#standalone_docker_credential_helper]
>  helper on workers. It would then provide possibility to authenticate every 
> time Jenkins jobs need to push/pull images. 
> I seem to not have permissions to install this tool on workers - if my 
> reasoning is correct, can we install this?
> I specifically mean running this:
> {code:java}
> gcloud components install docker-credential-gcr{code}
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to