My k8 cluster is hosted in oracle cloud. I have baseencoded by k8 config file but looks like bitbucket pipe dont recognize my oci k8 cluster. Can you please advise. Thank you. WARNING: "/" is not allowed in kubernetes labels. Slashes will be replaced by a dash "-" in the " bitbucket.org/bitbucket_commit " label value.For more information you can check the official kubernetes docshttps://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set Unable to connect to the server: getting credentials: exec: exec: "oci": executable file not found in $PATH ✖ kubectl apply failed.

@Srikanth Mamidala I wonder if you still use our pipe or created a fork? I see you downloaded newest version of our kubectl-run. it says ` error loading config file "/tmp/kube_config` So looks like, something in your config is not all right. Remember that we put to /tmp/kube_config decoded of base64 string. So you put to repository variable KUBE_CONFIG base64encoded string of your kube config file (code https://bitbucket.org/atlassian/kubectl-run/src/b1f6411337267383ebfa5d6eed00ae80664e3282/pipe/pipe.py#lines-141). Also , I need to know what config do you mean, is it KUBECONFIG that is needed for oracle accessing cluster?. I see in oracle doc, that you need to configure it in KUBECONFIG file exactly https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengaccessingclusterkubectl.htm , so I guess, this is KUBECONFIG variable. So recheck your config, looks like it has some issues when kubectl tries to validate your kube config. You also can put some debug things to the pipe. Feel free also to rewrite your pipe to language that it is easy to develop in for you, since it is your pipe. Perhaps, like this it will be easy for you to debug. You could use even bash, but Python and any language that you like, we anyway will be happy to help you in any solution you choose. Regards, Galyna

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

pipe: atlassian/kubectl-run:1.1.2 dont recognize oci

Srikanth Mamidala

My k8 cluster is hosted in oracle cloud. I have baseencoded by k8 config file but looks like bitbucket pipe dont recognize my oci k8 cluster. 

Can you please advise. 

Thank you. 

WARNING: "/" is not allowed in kubernetes labels. Slashes will be replaced by a dash "-" in the "<a href="http://bitbucket.org/bitbucket_commit" target="_blank" rel="noopener noreferrer">bitbucket.org/bitbucket_commit</a>" label value.For more information you can check the official kubernetes docshttps://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-setUnable to connect to the server: getting credentials: exec: exec: "oci": executable file not found in $PATH✖ kubectl apply failed.

Accepted answers

All comments

Halyna Berezovska

@Srikanth Mamidala looks like kubectl CLI itself does not recognize your cluster, because this error comes from kubectl apply command result and we just log it in the pipe.

If you could share example (non-live, with non-existing names, but similar to what you have) of your config file to be applied in k8s, that one where oci cluster is defined,

in that case we could help you and investigate it further.

For now I suspect that it cannot find executable oci in bin. I suspect this is because you don't have OCI cli there because it is not in pipe's dockerfile, so it is just not installed.

If you share somehow part of your k8s config , we could think more how we could help you. Perhaps, we will discuss a change to install oci cli, so kubectl can use it.

However, if we don't accept such change, you can always create custom pipe, forking kubectl-run pipe, and install oci there in your own Dockerfile.

We have a doc for creating custom pipes https://support.atlassian.com/bitbucket-cloud/docs/write-a-pipe-for-bitbucket-pipelines/.

Regards, Galyna

Srikanth Mamidala

my k8 config is somethine like below but its base64 encoded and saved as KUBE_CONFIG variable in bitbucket repo

---
apiVersion: v1
kind: ""
clusters:
- name: cluster-cpYYYYYYY
cluster:
server: https://xxx.XX3.X3.XXXX
certificate-authority-data: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURpVENDQW5HZ0F3SUJBZ0lSQUxneEFpc3nVDgzCmdPSkFkTVdXWjBNMExiKzduL3ZjZkRpNHIzWkorZEhoTjBqdmtBdW1oMVZhMlRYVzI2VE5XaXhvZkN1VwotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
users:
- name: user-cpxaw
exec:
apiVersion: client.authentication.k8s.io/v1beta1
command: oci
args:
- ce
- cluster
- generate-token
- --cluster-id
- ocid1.cluster.oc1.iad.a
- --region
- us-ashburn-1
env: []
contexts:
- name: context-cpxa
cluster: cluster-cpxa
user: user-c
current-context: context-cpx

Srikanth Mamidala

@Halyna Berezovska hi do you have any update on this request?

Halyna Berezovska

@Srikanth Mamidala I hope certificate is not real. We will invedtigate this and discuss within a team. Thanks

vandervl

@Srikanth Mamidala - Rather than using relying on the `oci` CLI and associative `kubectl` authentication, would you consider trying the (recommended) approach of using a ServiceAccount, Role/RoleBinding for your pipeline access? A related blog here

Srikanth Mamidala

hi @vandervl I certainly give a try if thats the recommended approach. I quickly read through the documentation and it looks like integration is setup between github and OKE. What would be equivalent setup for the adding secret (step 6) in bitbucket pipelines ?

vandervl

Hi @Srikanth Mamidala are you still stuck on this at all? Were you able to get it going using a Service Account and associative `KUBE_CONFIG`?

Srikanth Mamidala

No @vandervl I am all set by using service account. Thanks for your help.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Unanswered
Groups
Help

Find more posts tagged with

bitbucket

bitbucket-pipelines

configuration

kubernetes