如何在Spinnaker中添加Jfrog Artifactory作为docker注册表？

Question

我正在尝试在我的JFrog安装中添加Docker Artifactory作为Docker注册表帐户。我执行以下操作：

hal config provider docker-registry enable

ADDRESS=server.company.com.jfrog.io
REPOSITORIES=abc/contrepo
USERNAME=abc@xyz.com

hal config provider docker-registry account add jfrog-stage \
    --address $ADDRESS \
    --repositories $REPOSITORIES \
    --username $USERNAME \
    --password

但是，我得到以下错误：

  Failure
Problems in
  default.provider.dockerRegistry.jfrog-stage:
! ERROR Unable to reach repository: Hostname
  server.company.com.jfrog.io not verified:
    certificate: sha1/iIkgakshaaukdhdhidhiudsihsdih=
    DN: CN=*.jfrog.io
    subjectAltNames: [*.jfrog.io, jfrog.io].

谁有在Spinnaker上设置JFrog注册表的经验？如果有任何建议，我们将非常感谢。谢谢。

Answer 1

当我尝试添加一个私有工件地址时，我得到了同样的错误。通过在JDK密钥库中插入工件的CA证书解决了这个问题。以下是命令。

keytool -import -v -trustcacerts -alias ebaotech -file /tmp/git.cer -storepass changeit -keystore /etc/ssl/certs/java/cacerts

"/etc/ssl/certs/java/cacerts“是我的环境的keystore文件。

"/tmp/git.cer“是我的工件地址的证书。

之后重启halyard。

另请注意，如果"clouddriver“在不同的服务器上运行，您还必须更新该服务器的密钥库。

Answer 2

请试试这个！！这对我很管用。

     bash-5.0$ hal config provider docker-registry enable
    + Get current deployment
      Success
    + Edit the dockerRegistry provider
      Success
    Validation in default.provider.dockerRegistry:
    - WARNING Provider dockerRegistry is enabled, but no accounts have
      been configured.
    
    + Successfully enabled dockerRegistry
    bash-5.0$ hal config provider docker-registry account add artifactory \
     --address  https://docker-dev-artifactory.*****.com \
     --insecure-registry true \
     --username niraj.gurung --password
    
    Your docker registry password: 
    + Get current deployment
      Success
    + Add the artifactory account
      Success
    Validation in default.provider.dockerRegistry.artifactory:
    - WARNING Your docker registry has no repositories specified, and
      the registry's catalog is empty. Spinnaker will not be able to deploy any images
      until some are pushed to this registry.
    ? Manually specify some repositories for this docker registry to
      index.
    
    + Successfully added account artifactory for provider
      dockerRegistry.