Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-17 Thread Joel Pearson
On Mon, 18 Nov 2019 at 13:05, Clayton Coleman wrote: > Raise a bug to the installler component, yes > Ok thanks, I raised a bug here: https://bugzilla.redhat.com/show_bug.cgi?id=1773419 > On Nov 17, 2019, at 6:03 PM, Joel Pearson > wrote: > > On Mon, 18 Nov 2019 at 12:37, Ben Parees wrote:

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-17 Thread Clayton Coleman
Raise a bug to the installler component, yes On Nov 17, 2019, at 6:03 PM, Joel Pearson wrote: On Mon, 18 Nov 2019 at 12:37, Ben Parees wrote: > > > On Sun, Nov 17, 2019 at 7:24 PM Joel Pearson < > japear...@agiledigital.com.au> wrote: > >> >> >> On Wed, 13 Nov 2019 at 02:43, Ben Parees

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-17 Thread Joel Pearson
On Mon, 18 Nov 2019 at 12:37, Ben Parees wrote: > > > On Sun, Nov 17, 2019 at 7:24 PM Joel Pearson < > japear...@agiledigital.com.au> wrote: > >> >> >> On Wed, 13 Nov 2019 at 02:43, Ben Parees wrote: >> >>> >>> >>> On Mon, Nov 11, 2019 at 11:27 PM Ben Parees wrote: >>> On Mon,

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-17 Thread Ben Parees
On Sun, Nov 17, 2019 at 7:24 PM Joel Pearson wrote: > > > On Wed, 13 Nov 2019 at 02:43, Ben Parees wrote: > >> >> >> On Mon, Nov 11, 2019 at 11:27 PM Ben Parees wrote: >> >>> >>> >>> On Mon, Nov 11, 2019 at 10:47 PM Joel Pearson < >>> japear...@agiledigital.com.au> wrote: >>> On

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-17 Thread Joel Pearson
On Wed, 13 Nov 2019 at 01:34, Ben Parees wrote: > > > On Tue, Nov 12, 2019 at 3:45 AM Joel Pearson < > japear...@agiledigital.com.au> wrote: > >> >> >> On Tue, 12 Nov 2019 at 15:37, Ben Parees wrote: >> >>> >>> >>> On Mon, Nov 11, 2019 at 11:26 PM Joel Pearson < >>>

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-12 Thread Ben Parees
On Mon, Nov 11, 2019 at 11:27 PM Ben Parees wrote: > > > On Mon, Nov 11, 2019 at 10:47 PM Joel Pearson < > japear...@agiledigital.com.au> wrote: > >> >> >> On Tue, 12 Nov 2019 at 06:56, Ben Parees wrote: >> >>> >>> Can I use the “trustedCA” part of the proxy configuration without

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-12 Thread Gabe Montero
On Mon, Nov 11, 2019 at 11:27 PM Joel Pearson wrote: > I've now discovered that the cluster-samples-operator doesn't seem honour > the proxy settings, and I see lots of errors in the > cluster-samples-operator- pod logs > > time="2019-11-12T04:15:49Z" level=warning msg="Image import for >

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-12 Thread Ben Parees
On Tue, Nov 12, 2019 at 3:45 AM Joel Pearson wrote: > > > On Tue, 12 Nov 2019 at 15:37, Ben Parees wrote: > >> >> >> On Mon, Nov 11, 2019 at 11:26 PM Joel Pearson < >> japear...@agiledigital.com.au> wrote: >> >>> I've now discovered that the cluster-samples-operator doesn't seem >>> honour the

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-12 Thread Adam Kaplan
Slightly related - there is an existing bugzilla where `oc import-image` and `oc tag` will fail if the "origin" tag references the internal registry with a similar x509 error [1]. Echoing Clayton, please file a bug and if warranted we'll link the two together. [1]

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-12 Thread Clayton Coleman
On Nov 12, 2019, at 3:44 AM, Joel Pearson wrote: On Tue, 12 Nov 2019 at 15:37, Ben Parees wrote: > > > On Mon, Nov 11, 2019 at 11:26 PM Joel Pearson < > japear...@agiledigital.com.au> wrote: > >> I've now discovered that the cluster-samples-operator doesn't seem honour >> the proxy settings,

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-12 Thread Joel Pearson
On Tue, 12 Nov 2019 at 15:37, Ben Parees wrote: > > > On Mon, Nov 11, 2019 at 11:26 PM Joel Pearson < > japear...@agiledigital.com.au> wrote: > >> I've now discovered that the cluster-samples-operator doesn't seem honour >> the proxy settings, and I see lots of errors in the >>

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-11 Thread Ben Parees
On Mon, Nov 11, 2019 at 11:26 PM Joel Pearson wrote: > I've now discovered that the cluster-samples-operator doesn't seem honour > the proxy settings, and I see lots of errors in the > cluster-samples-operator- pod logs > > time="2019-11-12T04:15:49Z" level=warning msg="Image import for >

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-11 Thread Ben Parees
On Mon, Nov 11, 2019 at 10:47 PM Joel Pearson wrote: > > > On Tue, 12 Nov 2019 at 06:56, Ben Parees wrote: > >> >> >>> >>> Can I use the “trustedCA” part of the proxy configuration without >>> actually specifying an explicit proxy? >>> >> >> you should be able to. Daneyon can you confirm? (if

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-11 Thread Joel Pearson
I've now discovered that the cluster-samples-operator doesn't seem honour the proxy settings, and I see lots of errors in the cluster-samples-operator- pod logs time="2019-11-12T04:15:49Z" level=warning msg="Image import for imagestream dotnet tag 2.1 generation 2 failed with detailed message

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-11 Thread Joel Pearson
On Tue, 12 Nov 2019 at 06:56, Ben Parees wrote: > > >> >> Can I use the “trustedCA” part of the proxy configuration without >> actually specifying an explicit proxy? >> > > you should be able to. Daneyon can you confirm? (if you can't i'd > consider it a bug). > > It does work! Thanks for

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-11 Thread Ben Parees
On Mon, Nov 11, 2019 at 2:51 PM Joel Pearson wrote: > > > On Tue, 12 Nov 2019 at 12:26 am, Ben Parees wrote: > >> >> >> On Mon, Nov 11, 2019 at 1:17 AM Joel Pearson < >> japear...@agiledigital.com.au> wrote: >> >>> Hi, >>> >>> I’m trying to build an image in Openshift 4.2 where my internet has

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-11 Thread Joel Pearson
On Tue, 12 Nov 2019 at 12:26 am, Ben Parees wrote: > > > On Mon, Nov 11, 2019 at 1:17 AM Joel Pearson < > japear...@agiledigital.com.au> wrote: > >> Hi, >> >> I’m trying to build an image in Openshift 4.2 where my internet has an >> MITM proxy. >> >> So trying to pull docker images fails during

Re: How to use extra trusted CA certs when pulling images for a builder

2019-11-11 Thread Ben Parees
On Mon, Nov 11, 2019 at 1:17 AM Joel Pearson wrote: > Hi, > > I’m trying to build an image in Openshift 4.2 where my internet has an > MITM proxy. > > So trying to pull docker images fails during the build with x509 errors. > > Is there a way to provide extra trusted CA certificates to the

How to use extra trusted CA certs when pulling images for a builder

2019-11-10 Thread Joel Pearson
Hi, I’m trying to build an image in Openshift 4.2 where my internet has an MITM proxy. So trying to pull docker images fails during the build with x509 errors. Is there a way to provide extra trusted CA certificates to the builder? Pulling image registry.redhat.io/ubi7-minimal:7.7 ...