catalog icon indicating copy to clipboard operation
catalog copied to clipboard

git-version Task Needs Custom CA Certs Bundle Injector Method

Open the-it-jaeger opened this issue 2 years ago • 2 comments

When attempting to use a git-version Task in a Pipeline, I receive the following error:

/usr/share/dotnet/sdk/3.1.412/NuGet.targets(128,5): error: Unable to load the service index for source https://api.nuget.org/v3/index.json. [/tmp/...]
/usr/share/dotnet/sdk/3.1.412/NuGet.targets(128,5): error: The SSL connection could not be established, see inner expception [/tmp/...]
/usr/share/dotnet/sdk/3.1.412/NuGet.targets(128,5): error: The remote certificate is invalid according to the validation procedure [/tmp/...]

I assume this is because the certificate for *.nuget.org is not trusted by the container this Task step is running in. If that's the case, I see no way to inject CA Trust bundles into the Task via a workspace the way some Tasks allow you to do.

I could use some guidance.

the-it-jaeger avatar Jun 10 '22 13:06 the-it-jaeger

Issues go stale after 90d of inactivity. Mark the issue as fresh with /remove-lifecycle stale with a justification. Stale issues rot after an additional 30d of inactivity and eventually close. If this issue is safe to close now please do so with /close with a justification. If this issue should be exempted, mark the issue as frozen with /lifecycle frozen with a justification.

/lifecycle stale

Send feedback to tektoncd/plumbing.

tekton-robot avatar Sep 08 '22 14:09 tekton-robot

/lifecycle frozen

Without this feature, git-version is unusable in most enterprise environments.

the-it-jaeger avatar Sep 13 '22 18:09 the-it-jaeger

Stale issues rot after 30d of inactivity. Mark the issue as fresh with /remove-lifecycle rotten with a justification. Rotten issues close after an additional 30d of inactivity. If this issue is safe to close now please do so with /close with a justification. If this issue should be exempted, mark the issue as frozen with /lifecycle frozen with a justification.

/lifecycle rotten

Send feedback to tektoncd/plumbing.

tekton-robot avatar Oct 13 '22 19:10 tekton-robot

/remove-lifecycle rotten

I think this is a reasonable ask for Enterprise users not willing or able to turn off TLS verification.

Sincerely,

Aaron Jaeger

On Thu, Oct 13, 2022, 3:19 PM tekton-robot @.***> wrote:

Stale issues rot after 30d of inactivity. Mark the issue as fresh with /remove-lifecycle rotten with a justification. Rotten issues close after an additional 30d of inactivity. If this issue is safe to close now please do so with /close with a justification. If this issue should be exempted, mark the issue as frozen with /lifecycle frozen with a justification.

/lifecycle rotten

Send feedback to tektoncd/plumbing https://github.com/tektoncd/plumbing.

— Reply to this email directly, view it on GitHub https://github.com/tektoncd/catalog/issues/989#issuecomment-1278078275, or unsubscribe https://github.com/notifications/unsubscribe-auth/AOWIT3NHMG2RTMENXUTT3ZLWDBOFDANCNFSM5YNYX7QA . You are receiving this because you authored the thread.Message ID: @.***>

the-it-jaeger avatar Oct 13 '22 19:10 the-it-jaeger

Issues go stale after 90d of inactivity. Mark the issue as fresh with /remove-lifecycle stale with a justification. Stale issues rot after an additional 30d of inactivity and eventually close. If this issue is safe to close now please do so with /close with a justification. If this issue should be exempted, mark the issue as frozen with /lifecycle frozen with a justification.

/lifecycle stale

Send feedback to tektoncd/plumbing.

tekton-robot avatar Jan 11 '23 20:01 tekton-robot

/remove-lifecycle stale

the-it-jaeger avatar Jan 11 '23 20:01 the-it-jaeger

Issues go stale after 90d of inactivity. Mark the issue as fresh with /remove-lifecycle stale with a justification. Stale issues rot after an additional 30d of inactivity and eventually close. If this issue is safe to close now please do so with /close with a justification. If this issue should be exempted, mark the issue as frozen with /lifecycle frozen with a justification.

/lifecycle stale

Send feedback to tektoncd/plumbing.

tekton-robot avatar Apr 11 '23 21:04 tekton-robot

Stale issues rot after 30d of inactivity. Mark the issue as fresh with /remove-lifecycle rotten with a justification. Rotten issues close after an additional 30d of inactivity. If this issue is safe to close now please do so with /close with a justification. If this issue should be exempted, mark the issue as frozen with /lifecycle frozen with a justification.

/lifecycle rotten

Send feedback to tektoncd/plumbing.

tekton-robot avatar May 11 '23 21:05 tekton-robot

Rotten issues close after 30d of inactivity. Reopen the issue with /reopen with a justification. Mark the issue as fresh with /remove-lifecycle rotten with a justification. If this issue should be exempted, mark the issue as frozen with /lifecycle frozen with a justification.

/close

Send feedback to tektoncd/plumbing.

tekton-robot avatar Jun 10 '23 22:06 tekton-robot

@tekton-robot: Closing this issue.

In response to this:

Rotten issues close after 30d of inactivity. Reopen the issue with /reopen with a justification. Mark the issue as fresh with /remove-lifecycle rotten with a justification. If this issue should be exempted, mark the issue as frozen with /lifecycle frozen with a justification.

/close

Send feedback to tektoncd/plumbing.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

tekton-robot avatar Jun 10 '23 22:06 tekton-robot