ega4432 / tekton-git-clone-private-repo

This is the Tekton Pipeline sample code to clone from a private GitHub repository.

tekton-git-clone-private-repo

Setup

Prepare SSH authentication

Paste secret key to the data in the secret.yaml.

>> cat ~/.ssh/id_rsa | base64
>> cat ~/.ssh/config | base64
>> cat ~/.ssh/known_hosts | base64

>> oc create -f secret.yaml

Register your public key to GitHub account. To register public key to go to Settings of your GitHub account page > SSH and GPG key > New SSH key and paste your public key.

Prepare the cluster

1. Install and create tasks to the OpenShift cluster

# Clone task from tekton hub
>> oc apply -f https://raw.givthubusercontent.com/tektoncd/catalog/main/task/git-clone/0.5/git-clone.yaml

# Custom task
# ex) only showing README.md of the private repository
>> oc apply -f task.yaml

>> tkn task list
NAME           DESCRIPTION              AGE
output-readme                           11 seconds ago
git-clone      These Tasks are Git...   47 seconds ago

2. Create a secret for SSH authentication

>> oc create -f secret.yaml

3. Create a pipeline

>> oc create -f ./pipeline.yaml

Usage

Run the pipeline by executing the following command and check the result.

# Execute
>> oc create -f pipeline-run.yaml

# Check execution
>> tkn pr ls

# View log of the latest pipeline run
>> tkn pr logs -fL

tekton-git-clone-private-repo's Issues

appears to need SSH authentication but no SSH credentials have been provided

followed https://tekton.dev/docs/how-to-guides/clone-repository/, checked ssh key (works), but I am still getting the above message...

Another thread suggested creating the service account, but in that case it fails at the chmod step with "permission denied"

│ step-clone + '[' false '=' true ]                                                                                                                                                                               │
│ step-clone + '[' true '=' true ]                                                                                                                                                                                │
│ step-clone + cp -R /workspace/ssh-directory /home/git/.ssh                                                                                                                                                      │
│ step-clone + chmod 700 /home/git/.ssh                                                                                                                                                                           │
│ step-clone + chmod -R 400 /home/git/.ssh/id_rsa                                                                                                                                                                 │
│ step-clone + '[' false '=' true ]                                                                                                                                                                               │
│ step-clone + CHECKOUT_DIR=/workspace/output/                                                                                                                                                                    │
│ step-clone + '[' true '=' true ]                                                                                                                                                                                │
│ step-clone + cleandir                                                                                                                                                                                           │
│ step-clone + '[' -d /workspace/output/ ]                                                                                                                                                                        │
│ step-clone + rm -rf /workspace/output//lost+found                                                                                                                                                               │
│ step-clone + rm -rf '/workspace/output//.[!.]*'                                                                                                                                                                 │
│ step-clone + rm -rf '/workspace/output//..?*'                                                                                                                                                                   │
│ step-clone + test -z                                                                                                                                                                                            │
│ step-clone + test -z                                                                                                                                                                                            │
│ step-clone + test -z                                                                                                                                                                                            │
│ step-clone + git config --global --add safe.directory /workspace/output                                                                                                                                         │
│ step-clone + /ko-app/git-init '[email protected]:JustinGuese/documentLLMStartup.git' '-revision=' '-refspec=' '-path=/workspace/output/' '-sslVerify=true' '-submodules=true' '-depth=1' '-sparseCheckoutDire │
│ step-clone {"level":"warn","ts":1703678835.5665507,"caller":"git/git.go:271","msg":"URL(\"[email protected]:JustinGuese/xxxxxx.git\") appears to need SSH authentication but no SSH credentials have b │
│ step-clone {"level":"info","ts":1703678837.2663612,"caller":"git/git.go:176","msg":"Successfully cloned [email protected]:JustinGuese/xxxxxx.git@ 604fa7e64f9e41dda28ebab4619eced898d91d6e (grafted,  │
│ step-clone {"level":"info","ts":1703678837.2888606,"caller":"git/git.go:215","msg":"Successfully initialized and updated submodules in path /workspace/output/"}