search

chainguard-dev / apko

Build OCI images from APK packages directly without Dockerfile
https://apko.dev
Apache License 2.0
1.2k stars 122 forks source link

Workaround for Cloud Keychains #959

Closed mccormickt closed 8 months ago

mccormickt commented 12 months ago

Hello! Thanks for the fine work on Apko and the Chainguard open source tooling in general. I very much appreciate all that you have created so far.

We currently use Apko in Github Actions to push images/sboms to Google Artifact Registry. The action is authenticated via Workload Identity Federation using the auth and setup-gcloud Google actions.

Since the latest release, v0.11.3, we've received permissions errors on push to the registry. Using prior releases works as expected. I think I was able to track down that dropping support for Cloud Keychains in #732 may have been the source of this? Is there a workaround to continue to utilize Apko to push directly to a cloud registry in this way?

I understand maintaining support for every cloud registry/toolchain can be a burden, but I'd appreciate any guidance you all have in supporting this use case. Thanks!

mccormickt commented 8 months ago

Didn't realize that these helpers are the equivalent to setting up gcloud auth configure-docker. That solved my problems.