Skip to main content

Push your container images

Now that you have kubectl access to your team namespace, you are ready to deploy your first container. When the platform administrator created your team, a private container registry has been automatically created for your team in Harbor and a pull secret has been added to your team namespace. To be able to push container images to your private repository, you'll first need to create a robot-account in your Harbor project with push access rights.

Access Harbor UI​

In the apps section in Otomi console, you'll see an app called Harbor. Click on it and follow these steps:

  • Choose Login via OIDC provider

oidc

  • Set your OIDC user name

harbor-oidc

  • In Harbor you'll all the projects of the teams that you are a member of

harbor-projects

  • Click on the project of your team. Here you will see all team repositories

Login to Harbor​

To be able to push images to Harbor, you'll need a robot account with push permissions. At the moment Harbor does not allow the Developer role permissions to create robot accounts. So for now you will need to ask the platform administrator to create one for you. In the near future we will add the option to download the Docker login credentials in Otomi Console.

When you have received the username and token of the created robot account, then you can:

  • login
docker login -u 'otomi-<team-name>-push' -p <token> harbor.<your-domain>
note

If Docker refuses to connect with an error x509: certificate signed by unknown authority, go to the Otomi Console, and click Download CA (if you have not done so already); then copy the obtained file to ~/.docker/ca.crt or restart docker desktop.

  • Build and tag your image
docker build -t harbor.<your-domain>/<team-name>/<image-name>:<tag> .
  • Push the image to Harbor
docker push harbor.<your-domain>/<team-name>/<image-name>:<tag>