skaffold: x509: certificate signed by unknown authority

Expected behavior

build:
  insecureRegistries:
    - artifactory.xx.xx.com

The error in the title shouldn’t occur if repo is added to the insecure registries.

Actual behavior

error pushing image: failed to push to destination artifactory.xx.xx.com/data/<image>:<tag>: Get https://artifactory.xx.xx.com/v2/: x509: certificate signed by unknown authority

Information

  • Skaffold version: 0.27
  • Operating system: macOS
  • Contents of skaffold.yaml:
apiVersion: skaffold/v1beta8
kind: Config
build:
  insecureRegistries:
    - artifactory.xx.xx.com
  tagPolicy:
    gitCommit: {}
  artifacts:
    - image: artifactory.xx.xx.com/data/my-image
      context: src
      kaniko:
        buildContext:
          localDir: {}
  cluster:
    dockerConfig:
      path: /Users/xx/.docker/config_old.json
      secretName: docker-secret
    pullSecretName: kaniko-secret

Steps to reproduce the behavior

  1. Run skaffold with the attached yaml

kaniko.flags is also deprecated so there is no way to use kaniko’s –skip-tls-verify-registry

About this issue

  • Original URL
  • State: closed
  • Created 5 years ago
  • Comments: 32 (17 by maintainers)

Commits related to this issue

Most upvoted comments

Thank you @jimanvlad. we are actively working on this issue and share an update soon.

I started looking into this stay tuned on #2809

Hey @jimanvlad we are now passing in insecure registries to kaniko as of #2266. Could you try with the latest release and see if it fixes your issue?

I took a quick stab at this (https://github.com/GoogleContainerTools/skaffold/pull/1977) but have no idea if this even solves the issue – running it to see if it works and adding a test would be wonderful! 😃

Edit: I’ve added tests… now to see if this actually solves the issue. 😁