Google Cloud Build git 对 Cloud Source Repositories 的身份验证

Question

I am trying to clone a GCP Cloud Source Repository (CSR) using Cloud Build. when trying to clone the Repo in my Dockerfile, I get this error:

fatal: could not read Username for 'https://source.developers.google.com': No such device or address

This appears to be an authentication error with git and CSR.

What I've tried: I have found https://cloud.google.com/build/docs/build-config-file-schema.network and this github issue https://github.com/GoogleCloudPlatform/cloud-builders/issues/343 . I may not have put them in the right place in the config file though.

I'm aware that I could just use an SSH key, but I'd like to use the "inherited" authentication if that's possible. By "inherited" I mean use the cloud build service account.

If anyone can help with the specific issue, that would be great. However if you can enlighten me as to how authentication works from the Build to other GCP services that would be welcome.

-ps I'm actually installing via pip (just like the person in the GitHub issue linked above), but it needs to clone the repo first, and that's where the error is.

Answer 1

You can use the https://source.developers.google.com URL with a PAT(Personal Access Token) in the Dockerfile.

For that you need to generate a PAT.

After generating the token, use it in the dockerfile as follows:

FROM gcr.io/cloud-builders/git

RUN git clone https://<PAT>@source.developers.google.com/p/<PROJECT_ID>/r/<REPO_NAME>