jetstack-secure
jetstack-secure copied to clipboard
Github workflows fail to tag images after push
The release-master and release-tag workflows are failing to re-tag the image in quay.io:
docker buildx imagetools create quay.io/jetstack/preflight:b2384c5add501ec97516fc906ceab6967ff868a8 --tag quay.io/jetstack/preflight:latest
error: failed commit on ref "index-sha256:fcc90749fc55b6d51f932b3178a710be08cfe89b70beb57aa1d0fbe4ef2e3c66": unexpected status: 401 Unauthorized
The image was pushed correctly with the commit tag: https://quay.io/repository/jetstack/preflight/manifest/sha256:fcc90749fc55b6d51f932b3178a710be08cfe89b70beb57aa1d0fbe4ef2e3c66
It seems to be an issue with buildkit: https://github.com/docker/buildx/issues/327 https://github.com/open-policy-agent/gatekeeper/issues/665
I suggest we try changing the buildkit version (doc) and making sure the command to re-tag images is using the right one.