Put Docker image for the GitHub triage action in the kubeflow docker hub registry

[jlewi]

The GitHub action for Kubeflow triage is currently using the image
hamelsmu/kubeflow-triage

code-intelligence/.github/workflows/build_image.yaml

Line 15 in 9fceba0

docker build -t hamelsmu/kubeflow-triage -f Issue_Triage/Dockerfile .

code-intelligence/Issue_Triage/action/action.yml

Line 20 in 9fceba0

image: 'docker://hamelsmu/kubeflow-triage'

We should instead push the image to Docker in the kubeflow organization and then update the image to use that.

Note GitHub actions doesn't currently support GCR.

[issue-label-bot]

Issue-Label Bot is automatically applying the label kind/feature to this issue, with a confidence of 0.83. Please mark this comment with 👍 or 👎 to give our bot feedback!

Links: app homepage, dashboard and code for this bot.

[jlewi]

We have the kubeflow github organization
https://hub.docker.com/orgs/kubeflow

We have the kubeflowrobot account for automating pushes to kubeflow

I created a personal access token for this account. This is currently stored in google's internal secret management system; Google team can access it.

I replaced the DOCKER_USERNAME and DOCKER_PASSWORD secrets on kubeflow/code-intelligence with kubeflowrobot and the associated access token.

[jlewi]

When the action triggered we got a permission error trying to push to DockerHub
https://github.com/kubeflow/code-intelligence/commit/ea1e5995d7e9bc8e6326c1adf9c5149af2294ced/checks?check_suite_id=329459221

[jlewi]

I'm going to try reproducing it locally; by logging in as the kubeflow robot to docker and building the image.

I got the same error.

[jlewi]

It looks like I had to do a couple things

1. In Docker hub I had to create the repository kubeflow/kubeflow-triage
2. I had to add the developer team with read/write permissions on that repository

I was then able to successfully run docker push using the kubeflowrobot account

[jlewi]

https://hub.docker.com/repository/docker/kubeflow/kubeflow-triage