docker-credential-helpers support for cri-o about cri-o HOT 6 OPEN

@neverd1m the logs at least indicate that the credential helper is being used. Is the user (root) running CRI-O able to see the same password using pass show? I feel we're using different storage paths here.

from cri-o.

@neverd1m thank you for the report. I don't think we stupport credsStore, but Credential Helpers (credHelpers) should work. Do you mind giving them a try?

from cri-o.

thanks for the reply!

I tried with credHelpers as well but i get this error now:

level=info msg="Trying to access \"some.registry:5000/helpers/whoami:1.5.0\"" file="docker/docker_image_src.go:87"
level=debug msg="Looking up in credential helper pass based on credHelpers entry in /etc/crio/config.json" file="config/config.go:807"
level=debug msg="Not logged in to some.registry:5000 with credential helper pass" file="config/config.go:754"
level=debug msg="No credentials for some.registry:5000/helpers/whoami found" file="config/config.go:272"

• I tried with docker client to compare and docker login is successful with this config.
  {"auths": {"some.registry:5000":{}},"credHelpers": {"some.registry:5000":"pass"}}

• pass show docker-credential-helpers/{BASE64}/user output is correct and there are no passphrase

from cri-o.

@saschagrunert i suspect the route being the issue as well, but all the commands are executed under the root user. pass show command has correct output for it when run from command line. There are no other logs on cri-o on this step so i'm about to trace the cri-o process to see how it calls the credential helper. Any advice how to proceed with that?

from cri-o.

/assign

from cri-o.