Allow using a local registry when installing the application

[dens38]

We tried to install catalogi on our Kubernes infrastructure regarding this documentation: https://github.com/codegouvfr/catalogi/blob/helm-charts/docs/5-deploying-with-kubernetes.md
For security reasons, we use a local registry but It seems that is not possible to install catalogi without using the distant docker registry.
Is it possible to add a way to install catalogi by pointing on a local registry ?
Thanks for this coming feature !

[depouill]

We tried to install catalogi on our Kubernes infrastructure regarding this documentation: https://github.com/codegouvfr/catalogi/blob/helm-charts/docs/5-deploying-with-kubernetes.md For security reasons, we use a local registry but It seems that is not possible to install catalogi without using the distant docker registry. Is it possible to add a way to install catalogi by pointing on a local registry ? Thanks for this coming feature !

Hi,

If I understand: a local registry means an URI like localhost:5000/catalogi:latest ? If it is, you should be able to set this URI in values.yaml ?

[dens38]

Hi, we already have specified our local registry in our catalog in the values.yaml.
Let us show the message at step 3 :
~#helm dependency build ./helm-charts/catalogi
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "bitnami" chart repository
Update Complete. ⎈Happy Helming!⎈
Saving 1 charts
Downloading postgresql from repo https://charts.bitnami.com/bitnami
Save error occurred: could not download oci://registry-1.docker.io/bitnamicharts/postgresql: failed to perform "FetchReference" on source: GET "https://registry-1.docker.io/v2/bitnamicharts/postgresql/manifests/16.7.19": response status code 403: Forbidden
Error: could not download oci://registry-1.docker.io/bitnamicharts/postgresql: failed to perform "FetchReference" on source: GET "https://registry-1.docker.io/v2/bitnamicharts/postgresql/manifests/16.7.19": response status code 403: Forbidden

We don't want open the registry-1.docker.io but get postgresql from our local registry. Is it possible to change this link ?

[depouill]

You talk about bitnami portgresql helm chart (catalogi depends on). You can specify the image registry in values for postgresql as shown here: https://github.com/bitnami/charts/tree/main/bitnami/postgresql#postgresql-common-parameters

In catalogi values.yaml something like this should work:

postgresql:
  image:
    registry: my_registry:5000
    repository: my_postgresql
    tag: my_tag

[dens38]

Hi, Thanks for your reply.
We tried to specifiy image parameters for postgresql as you asked in values.yaml of catalogi but the build command still to go on the docker registry until the one specified...

[depouill]

Hi,

For me, this works:

git clone https://github.com/codegouvfr/catalogi.git
cd catalogi
git checkout helm-charts
cd helm-charts/catalogi

in values.yaml I changed:

diff --git a/helm-charts/catalogi/values.yaml b/helm-charts/catalogi/values.yaml
index 4a09a391..4e90ae6c 100644
--- a/helm-charts/catalogi/values.yaml
+++ b/helm-charts/catalogi/values.yaml
@@ -109,6 +109,10 @@ database:
 # -- PostgreSQL sub-chart configuration.
 postgresql:
   enabled: true
+  image:
+    registry: localhost:5000
+    repository: psql
+    tag: demo
   auth:
     username: "catalogi_user"
     database: "catalogi_db"

with:

helm template  my-test . -f values.yaml --set global.security.allowInsecureImages=true |grep image
          image: localhost:5000/psql:demo

[dens38]

Hi,
When I execute the command like you asked :

helm template my-test . -f values.yaml --set global.security.allowInsecureImages=true |grep image

The error message is :
Error: An error occurred while checking for chart dependencies. You may need to run helm dependency build to fetch missing dependencies: found in Chart.yaml, but missing in charts/ directory: postgresql

Maybe it works for you as you had already done a sucess build on docker registry before but this is not the case for us.

Is the solution is to make a build outside of our secure system and then transfert the build on our secure system by changing docker repository with our local repository to work ?

For your information, I will not be available during one month.

[depouill]

Hi, When I execute the command like you asked :

helm template my-test . -f values.yaml --set global.security.allowInsecureImages=true |grep image

The error message is : Error: An error occurred while checking for chart dependencies. You may need to run helm dependency build to fetch missing dependencies: found in Chart.yaml, but missing in charts/ directory: postgresql

You need to follow the comment above on a Internet connected server (to fetch the bitnami postgresql helm chart):

helm dependencies build

before helm template (or helm install)

Maybe it works for you as you had already done a sucess build on docker registry before but this is not the case for us.

There's no connection with a local registry and this not to build a container, just to fetch dependency helm chart

Is the solution is to make a build outside of our secure system and then transfert the build on our secure system by changing docker repository with our local repository to work ?
Yes,

For your information, I will not be available during one month.

I think your problem is a problem of understanding helm commands, not catalogi problem so I close this issue.

Regards,

Philippe

[dens38]

Hi,
We are working again on it.
We made a local helm repo successfully.

Neverthless, the dependency build doesn' t work as you can see above :

$ helm dependency build
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "kregistry" chart repository
Update Complete. ⎈Happy Helming!⎈
Saving 1 charts
Downloading postgresql from repo https://kregistry.grenoble.cnrs.fr/helm-charts
Save error occurred: could not download oci://kregistry.grenoble.cnrs.fr:5000/postgresql: manifest does not contain minimum number of descriptors (2), descriptors found: 0
Error: could not download oci://kregistry.grenoble.cnrs.fr:5000/postgresql: manifest does not contain minimum number of descriptors (2), descriptors found: 0

We searched some solutions regarding this issue unsuccessfully. As we are new on helm, maybe you can suggest us a solution way ?
Thanks for your help.
Regards,
Denis