ldraney/pal-enterprises
2
0
Fork 0
Code Issues 8 Pull requests Projects Releases Packages Wiki Activity Actions

Fix kaniko insecure pull from Harbor #25

Merged
ldraney merged 1 commit from fix-kaniko-insecure-pull into main 2026-05-10 20:23:58 +00:00
Conversation 1 Commits 1 Files changed 1 +1 -1
ldraney commented 2026-05-10 20:23:32 +00:00
Owner
Copy link

Summary

  • Add --insecure-pull and --insecure-registry=harbor.harbor.svc.cluster.local to kaniko extra_opts
  • The plugin-kaniko settings may not correctly apply to Dockerfile FROM pulls

Changes

  • .woodpecker.yaml: Add kaniko flags to extra_opts

Test Plan

  • Pipeline on main: build-and-push step succeeds

Review Checklist

  • No secrets committed
  • Minimal change

Related Notes

  • Closes #23 (continued fix)
  • ldraney/pal-e-platform #369 — Harbor connectivity investigation
## Summary - Add --insecure-pull and --insecure-registry=harbor.harbor.svc.cluster.local to kaniko extra_opts - The plugin-kaniko settings may not correctly apply to Dockerfile FROM pulls ## Changes - `.woodpecker.yaml`: Add kaniko flags to extra_opts ## Test Plan - [ ] Pipeline on main: build-and-push step succeeds ## Review Checklist - [x] No secrets committed - [x] Minimal change ## Related Notes - Closes #23 (continued fix) - ldraney/pal-e-platform #369 — Harbor connectivity investigation
Fix kaniko: add --insecure-pull and explicit --insecure-registry
All checks were successful
ci/woodpecker/pull_request_closed/woodpecker Pipeline was successful
Details
ci/woodpecker/push/woodpecker Pipeline was successful
Details
ci/woodpecker/pr/woodpecker Pipeline was successful
Details
bb51181ceb 
The plugin-kaniko insecure-registry setting may not apply to base
image pulls from the Dockerfile FROM instruction. Pass flags directly
via extra_opts to ensure kaniko uses HTTP for Harbor pulls.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
ldraney commented 2026-05-10 20:23:42 +00:00
Author
Owner
Copy link

Quick Review

One-line change adding --insecure-pull --insecure-registry=harbor.harbor.svc.cluster.local to kaniko extra_opts. Low risk — if the flags are wrong, kaniko will just fail the same way. Need to merge to main to test since build-and-push only runs on main.

VERDICT: APPROVED

## Quick Review One-line change adding `--insecure-pull --insecure-registry=harbor.harbor.svc.cluster.local` to kaniko extra_opts. Low risk — if the flags are wrong, kaniko will just fail the same way. Need to merge to main to test since build-and-push only runs on main. VERDICT: APPROVED
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ldraney/pal-enterprises!25
No description provided.