gcr.io/cloud-solutions-images/jenkins-k8s-slave unauthorized

[andrijaperovic]

Not able to pull from cloud-solutions-images mirror as of this morning PST:

docker pull gcr.io/cloud-solutions-images/jenkins-k8s-slave:latest                                     develop@c4fb39d ✔
fatal error: runtime: bsdthread_register error
runtime stack:
runtime.throw(0x12f052c, 0x21)
    /usr/lib/google-golang/src/runtime/panic.go:619 +0x8a fp=0x7ff7bfeff248 sp=0x7ff7bfeff228 pc=0x1028e7a
runtime.goenvs()
    /usr/lib/google-golang/src/runtime/os_darwin.go:129 +0x83 fp=0x7ff7bfeff278 sp=0x7ff7bfeff248 pc=0x10269f3
runtime.schedinit()
    /usr/lib/google-golang/src/runtime/proc.go:504 +0xd6 fp=0x7ff7bfeff2e0 sp=0x7ff7bfeff278 pc=0x102b7a6
runtime.rt0_go(0x7ff7bfeff318, 0x2, 0x7ff7bfeff318, 0x0, 0x1000000, 0x2, 0x7ff7bfeff590, 0x7ff7bfeff5a6, 0x0, 0x7ff7bfeff5aa, ...)
    /usr/lib/google-golang/src/runtime/asm_amd64.s:252 +0x1f4 fp=0x7ff7bfeff2e8 sp=0x7ff7bfeff2e0 pc=0x10512e4
Error response from daemon: unauthorized: You don't have the needed permissions to perform this operation, and you may have invalid credentials. To authenticate your request, follow the steps in: https://cloud.google.com/container-registry/docs/advanced-authentication

Looks like additional auth is required.

[nielm]

That container repository has been taken down as it had not been updated for many years, and the images within contained multiple critical vulnerabilities.

For this particular image gcr.io/cloud-solutions-images/jenkins-k8s-slave:latest

     17     effectiveSeverity: CRITICAL
     55     effectiveSeverity: HIGH
    269     effectiveSeverity: LOW
    375     effectiveSeverity: MEDIUM

see https://cloud.google.com/architecture/jenkins-on-kubernetes-engine for an alternative approach

https://github.com/GoogleCloudPlatform/continuous-deployment-on-kubernetes