google / google/go-containerregistry

Include credential helper binaries in Docker image for crane

Open
#731 7 comments 6 reactions 0 assignees View on GitHub
lifecycle/frozen
Dominant language
Go
Stars
4k
Forks
686
Avg merge
2d 12h
Merged PRs (30d)
26

Description

It would greatly ease using crane in a CI/CD pipeline if it was able to make use of the credential helpers mentioned in https://github.com/google/go-containerregistry/tree/master/pkg/authn

As it stands, you need to use another method to get the login credentials into the running container. Not a hard problem to solve, but not as elegant as using credential helpers, which is the recommended way anyway.

Kaniko bundles the common helpers (AWS, GCP) in, so it seems feasible to bundle them in to the official Crane docker image too.

Contributor guide

Open the contributing guide

Research direction

Start with the official Crane Docker image and the credential helpers listed in pkg/authn. Determine how the common AWS and GCP helpers should be bundled, then verify that the resulting image can use them for authentication in a CI/CD container.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, docker, gcp, go
Domain
authentication, cli, cloud, devops
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.