Changing default images in ClusterServiceVersion.yaml

[seema-sandeep-jaisinghani-db]

Hi Team,

I am trying to use tekton in our project as POC.
We have our own secure image registry we are not allwoed to use registr.redhad.io.
For my sample pipeline, code fails with obvious error as we are not allowed to use public reistries - Failed to pull image "registry.redhat.io/ubi8/ubi-minimal@sha256:6910799b75ad41f00891978575a0d955be2f800c51b955af73926e7ab59a41c3": rpc error: code = Unknown desc = pinging container registry registry.redhat.io: Get "https://registry.redhat.io/v2/":

We have ubi-minimal image in our private registry, is there a way to override this image with registry value somewhere in tekton custom resources?
These Images-

operator/operatorhub/openshift/release-artifacts/bundle/manifests/openshift-pipelines-operator-rh.clusterserviceversion.yaml

Lines 852 to 905 in 1fc5370

	- name: IMAGE_HUB_TEKTON_HUB_DB
	value: registry.redhat.io/rhel8/postgresql-13@sha256:6032adb3eac903ee8aa61f296ca9aaa57f5709e5673504b609222e042823f195
	- name: IMAGE_ADDONS_PARAM_BUILDER_IMAGE
	value: registry.redhat.io/rhel8/buildah@sha256:30fc759d3453a0f9aba2164a0ea7b1aacd65c801abb07f3478ebd4ed7a90aa8f
	- name: IMAGE_ADDONS_PARAM_KN_IMAGE
	value: registry.redhat.io/openshift-serverless-1/client-kn-rhel8@sha256:87b02aba2a5ff86900c1f13c6de8d4f8091fa0bf36afbb4a582f8f76189aed80
	- name: IMAGE_ADDONS_MVN_SETTINGS
	value: registry.redhat.io/ubi8/ubi-minimal@sha256:eb98682661cc5fe83bbe583af9d55a90d698cfc0d14af5b83e4568c3e26b4516
	- name: IMAGE_ADDONS_SKOPEO_COPY
	value: registry.redhat.io/rhel8/skopeo@sha256:60ac283d14e1e2870e37a10954e7a14b41372bb929a5b134455c3e36516f030a
	- name: IMAGE_ADDONS_GENERATE
	value: registry.redhat.io/ocp-tools-4-tech-preview/source-to-image-rhel8@sha256:98d8cb3a255641ca6a1bce854e5e2460c20de9fb9b28e3cc67eb459f122873dd
	- name: IMAGE_PIPELINES_TEKTON_PIPELINES_CONTROLLER
	value: registry.redhat.io/openshift-pipelines/pipelines-controller-rhel8@
	- name: IMAGE_PIPELINES_WEBHOOK
	value: registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel8@
	- name: IMAGE_PIPELINES_ARG__ENTRYPOINT_IMAGE
	value: registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel8@
	- name: IMAGE_PIPELINES_ARG__GIT_IMAGE
	value: registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@
	- name: IMAGE_ADDONS_PARAM_GITINITIMAGE
	value: registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel8@
	- name: IMAGE_PIPELINES_ARG__WORKINGDIRINIT_IMAGE
	value: registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel8@
	- name: IMAGE_PIPELINES_ARG__NOP_IMAGE
	value: registry.redhat.io/openshift-pipelines/pipelines-nop-rhel8@
	- name: IMAGE_PIPELINES_ARG__SHELL_IMAGE
	value: registry.redhat.io/ubi8/ubi-minimal@sha256:eb98682661cc5fe83bbe583af9d55a90d698cfc0d14af5b83e4568c3e26b4516
	- name: IMAGE_TRIGGERS_TEKTON_TRIGGERS_CONTROLLER
	value: registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel8@
	- name: IMAGE_TRIGGERS_WEBHOOK
	value: registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel8@
	- name: IMAGE_TRIGGERS_TEKTON_TRIGGERS_CORE_INTERCEPTORS
	value: registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel8@
	- name: IMAGE_TRIGGERS_ARG__EL_IMAGE
	value: registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel8@
	- name: IMAGE_ADDONS_PARAM_TKN_IMAGE
	value: registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel8@
	- name: IMAGE_ADDONS_TKN_CLI_SERVE
	value: registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel8@
	- name: IMAGE_CHAINS_TEKTON_CHAINS_CONTROLLER
	value: registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel8@
	- name: IMAGE_RESULTS_TEKTON_RESULTS_API
	value: registry.redhat.io/openshift-pipelines/tekton-results-api-rhel8@
	- name: IMAGE_RESULTS_TEKTON_RESULTS_WATCHER
	value: registry.redhat.io/openshift-pipelines/tekton-results-watcher-rhel8@
	- name: IMAGE_HUB_TEKTON_HUB_DB_MIGRATION
	value: registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel8@
	- name: IMAGE_HUB_TEKTON_HUB_API
	value: registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel8@
	- name: IMAGE_HUB_TEKTON_HUB_UI
	value: registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel8@
	- name: IMAGE_PAC_TRIGGERTEMPLATE_APPLY_AND_LAUNCH
	value: registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-rhel8@

Much appreciate input on this!

[jkandasa]

@seema-sandeep-jaisinghani-db in the tekton-operator deployment, you can override these image as environment variable.
if you are using openshift (and install via subscription) you can override these values on subscription yaml file.

[seema-sandeep-jaisinghani-db]

Hi @jkandasa , I updated my task file to set env variables, but still same issue.
Please find task file as below

apiVersion: tekton.dev/v1beta1
kind: Task
metadata:
name: echo-hello
spec:
steps:
- name: echo
image: docker-registry.default.svc:8000/fabric-images/ubi8-minimal:8.7-1049.1675784874
env:
- name: IMAGE_ADDONS_MVN_SETTINGS
value: docker-registry.default.svc:8000/fabric-images/ubi8-minimal:8.7-1049.1675784874
- name: IMAGE_PIPELINES_ARG__SHELL_IMAGE
value: docker-registry.default.svc:8000/fabric-images/ubi8-minimal:8.7-1049.1675784874
script: |
#!/usr/bin/env bash
echo "Hello World"

Logs still says-
Pulling image "registry.redhat.io/ubi8/ubi-minimal@sha256:6910799b75ad41f00891978575a0d955be2f800c51b955af73926e7ab59a41c3"

[jkandasa]

@seema-sandeep-jaisinghani-db These images are updated by pipelines-controller and pipelines-controller is managed by tekton-operator. you have to update these images in operator, as I mentioned earlier.

IMAGE_ADDONS_MVN_SETTINGS
IMAGE_PIPELINES_ARG__SHELL_IMAGE

[seema-sandeep-jaisinghani-db]

@jkandasa So the operator while installing, we need to update those explicitly in ClusterServiceVersion.yaml

[jkandasa]

@seema-sandeep-jaisinghani-db still I am not clear about your installation path.
Are you using bundle(with subscription.yaml) to install the operator? or using openshift-release.yaml file? or different approach?

[seema-sandeep-jaisinghani-db]

@jkandasa The central team who does installation of operators is different, confirming with them.