Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Simplify the build/push access for quay.io repositories belonging to non-default organizations or users. #90

Open
tumido opened this issue Jan 25, 2021 · 8 comments
Labels
kind/feature Categorizes issue or PR as related to a new feature. lifecycle/frozen Indicates that an issue or PR should not be auto-closed due to staleness. priority/critical-urgent Highest priority. Must be actively worked on as someone's top priority right now.

Comments

@tumido
Copy link
Member

tumido commented Jan 25, 2021

Is your feature request related to a problem? Please describe.
When setting up the build pipeline via .aicoe-ci.yaml sometimes you'd like to publish to other Quay.io organization than aicoe org. Currently the integration process for a "new" quay organization can be quite tedious. User has to have an robot account with write access, send the access token to the AiCoE-CI team so it is deployed as a secret resource in the CI namespace and then obtain the actual secret name that they can reference in their .aicoe-ci.yaml.

Describe the solution you'd like
Would it be possible to either:

  • Add a AiCoE-CI user/robot account to the repository on quay with write access (then no build secret needs to be set up and CI can use some default token for this "AiCoE-CI" user).
  • Read the token from repository secrets as other CI's usually do it - so the repository maintainer has control over what token is being used and who else has access to their repository.

Describe alternatives you've considered
n/a

Additional context
n/a

@sesheta sesheta added kind/feature Categorizes issue or PR as related to a new feature. and removed enhancement labels Feb 9, 2021
@sesheta
Copy link
Contributor

sesheta commented Jul 3, 2021

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

/lifecycle stale

@sesheta sesheta added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Jul 3, 2021
@harshad16
Copy link
Member

/remove-lifecycle stale

@sesheta sesheta removed the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Jul 6, 2021
@MichaelClifford
Copy link
Member

Just to add to this issue. We are trying to improve the docs for Elyra tutorial, and one of the instructions for setting up quay is:
Click on the Robot creation, goto kubernetes secret and pass on that information to aicoe-ci instance. Currently you would have to pass it on by contacting us, we are still trying to figure out some alternative

Until this issue is sorted and the process is made simpler. How should someone (outside of our org) "contact us" to provide their credentials? Is there an aicoe-ci email address that can be used? should they reach out to a specific person on slack?

@pacospace pacospace added the priority/critical-urgent Highest priority. Must be actively worked on as someone's top priority right now. label Aug 20, 2021
@sesheta
Copy link
Contributor

sesheta commented Nov 18, 2021

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

/lifecycle stale

@sesheta sesheta added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Nov 18, 2021
@goern
Copy link
Member

goern commented Dec 1, 2021

/remove-lifecycle forzen
/remove-lifecycle stale

@sesheta sesheta removed the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Dec 1, 2021
@sesheta
Copy link
Contributor

sesheta commented Mar 1, 2022

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

/lifecycle stale

@sesheta sesheta added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Mar 1, 2022
@harshad16
Copy link
Member

/remove-lifecycle stale
/lifecycle forzen

@sesheta sesheta removed the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Mar 16, 2022
@harshad16
Copy link
Member

/lifecycle frozen

@sesheta sesheta added the lifecycle/frozen Indicates that an issue or PR should not be auto-closed due to staleness. label Mar 16, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature Categorizes issue or PR as related to a new feature. lifecycle/frozen Indicates that an issue or PR should not be auto-closed due to staleness. priority/critical-urgent Highest priority. Must be actively worked on as someone's top priority right now.
Projects
None yet
Development

No branches or pull requests

6 participants