grafeas / kritis

Deploy-time Policy Enforcer for Kubernetes applications
https://github.com/grafeas/kritis/blob/master/docs/binary-authorization.md
Apache License 2.0
696 stars 133 forks source link

Error running GCP tutorial "Creating attestations with Kritis Signer" #611

Closed psimakov closed 3 years ago

psimakov commented 3 years ago

File "samples/signer/cloudbuild-good.yaml" used in GCP tutorial produces an error when run by Cloud Build: "E: Repository 'http://security.debian.org buster/updates InRelease' changed its 'Suite' value from 'stable' to 'oldstable'"

Here are the steps to reproduce: 1) I am running through GCP tutorial (https://cloud.google.com/binary-authorization/docs/creating-attestations-kritis) 2) All well until the step 2 of section "Submit the success-case sample build", which fails when I execute as requested.

The exact command that fails:

gcloud builds submit \
  --substitutions=_KMS_KEY_NAME=$KMS_KEY_NAME,_KMS_DIGEST_ALG=$KMS_DIGEST_ALG,_NOTE_NAME=$NOTE_NAME \
  --config=samples/signer/cloudbuild-good.yaml samples/signer

The error message is:

  Step #0 - "build": E: Repository 'http://security.debian.org buster/updates InRelease' changed its 'Suite' value from 'stable' to 'oldstable'