Skip to content

fix(ISV-7300): remove the need for authentication in test pipeline#478

Merged
BorekZnovustvoritel merged 1 commit into
upstream-communityfrom
ISV-7300-upstream-prod
Jun 25, 2026
Merged

fix(ISV-7300): remove the need for authentication in test pipeline#478
BorekZnovustvoritel merged 1 commit into
upstream-communityfrom
ISV-7300-upstream-prod

Conversation

@BorekZnovustvoritel

Copy link
Copy Markdown

Assisted-by: Claude-4.6-Opus (Cursor)

Signed-off-by: Marek Szymutko <mszymutk@redhat.com>
Assisted-by: Claude-4.6-Opus (Cursor)
- name: "Download and extract go binary to {{ testing_bin_path }}"
unarchive:
src: "https://storage.googleapis.com/golang/go{{ go_version }}.linux-amd64.tar.gz"
src: "https://dl.google.com/go/go{{ go_version }}.linux-amd64.tar.gz"

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This URL changed (the original no longer works, the image was not buildable).

---
- name: "Pull the base image {{ container_tool }} pull --arch={{ mfbc_architecture }} {{ mirror_multiarch_image }}"
shell: "{{ container_tool }} pull --arch={{ mfbc_architecture }} {{ mirror_multiarch_image }}"
when: registry_redhat_io_user is defined and registry_redhat_io_token is defined

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This condition did not make sense since the image is retagged in the next step unconditionally. If the user and/or token were not defined, this playbook just failed.

# src: "{{ pfbc_local_cache_dir }}/"
# dest: "{{ pfbc_extracted_fbc_location }}/cache/"
- name: "Generate cache locally using host opm to solve arch issues"
shell: "{{ opm_bin_path }} serve {{ pfbc_fbc_config_path }} --cache-dir={{ pfbc_extracted_fbc_location }}/cache --cache-only --termination-log /dev/null"

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I found out that the custom cache IS needed. It's because without it, the playbook would try to run opm from within the multuarch image. It passed for amd64, but other arches failed immediately because the opm binary was not runnable.

However the cache can be created without ever reaching out to registry.redhat.io, so the credential requirement can be removed from here.

Comment thread upstream/ansible.cfg
Comment on lines +5 to +6
stdout_callback = ansible.builtin.default
result_format = yaml

@BorekZnovustvoritel BorekZnovustvoritel Jun 25, 2026

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These were missed previously. stdout_callback = yaml has been removed from Ansible and the image was not buildable without this change.

@BorekZnovustvoritel BorekZnovustvoritel merged commit 842786c into upstream-community Jun 25, 2026
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants