Skip to content

Commit 903e435

Browse files
committed
Don't use atomic: in test/extended/images/signatures.go
- Use docker:// instead of atomic:, as recommended back in openshift#21782 (comment) openshift#21782 (comment) Signed-off-by: Miloslav Trmač <[email protected]>
1 parent 7c51c89 commit 903e435

File tree

1 file changed

+8
-5
lines changed

1 file changed

+8
-5
lines changed

test/extended/images/signatures.go

+8-5
Original file line numberDiff line numberDiff line change
@@ -83,24 +83,27 @@ var _ = g.Describe("[sig-imageregistry][Serial][Suite:openshift/registry/serial]
8383
o.Expect(err).NotTo(o.HaveOccurred())
8484
o.Expect(out).To(o.ContainSubstring("keyring `/var/lib/origin/gnupg/secring.gpg' created"))
8585

86-
// Create kubeconfig for skopeo
86+
// Create kubeconfig for oc
8787
g.By("logging as a test user")
8888
out, err = pod.Exec("oc login https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT --token=" + token + " --certificate-authority=/run/secrets/kubernetes.io/serviceaccount/ca.crt")
8989
o.Expect(err).NotTo(o.HaveOccurred())
9090
o.Expect(out).To(o.ContainSubstring("Logged in"))
9191

9292
// Sign and copy the memcached image into target image stream tag
93-
// TODO: Fix skopeo to pickup the Kubernetes environment variables (remove the $KUBERNETES_MASTER)
9493
g.By("signing the memcached:latest image and pushing it into openshift registry")
9594
out, err = pod.Exec(strings.Join([]string{
96-
"KUBERNETES_MASTER=https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT",
9795
"GNUPGHOME=/var/lib/origin/gnupg",
98-
"skopeo", "--debug", "copy", "--sign-by", "[email protected]",
96+
"skopeo", "--debug",
97+
// Disable the default-docker: file sigstore default in /etc/containers/registries.d, so that the X-Registry-Supports-Signatures protocol is used.
98+
// Newer versions of Skopeo default to X-R-S-S if present, this test (as of 2021-02) uses skopeo-0.1.40-11.el7_8.x86_64, which defaults to sigstore.
99+
"--registries.d", "/this/does/not/exist",
100+
101+
"copy", "--sign-by", "[email protected]",
99102
"--dest-creds=" + user + ":" + token,
100103
// TODO: test with this turned to true as well
101104
"--dest-tls-verify=false",
102105
"docker://docker.io/library/memcached:latest",
103-
"atomic:" + signedImage,
106+
"docker://" + signedImage,
104107
}, " "))
105108
fmt.Fprintf(g.GinkgoWriter, "output: %s\n", out)
106109
o.Expect(err).NotTo(o.HaveOccurred())

0 commit comments

Comments
 (0)