Openshift Pipelines Read Permissions Error When Using Git-Clone Task

[Sorin020]

Expected Behavior

 pipelinerun status is Succeeded

Actual Behavior

 pipelinerun status is Failed

Steps to Reproduce the Problem

1. create a pipeline with a git-clone task (one I used will be in the additional
   resources. 
2. have a nfs volume claim template
3. run the pipeline that was created where it uses the nfs volume claim template
   as the storage class. 1GiB in size and with RWX access 

Additional Info

• OCP versions Tested:

  Output of oc version:

4.15, 4.16, 4.18

• OCP Pipeline operator version:

  Output of tkn version or kubectl get pods -n tekton-pipelines -l app=tekton-pipelines-controller -o=jsonpath='{.items[0].metadata.labels.version}'

1.17.0, 1.18.0, 1.18.1

• Yaml of Pipeline:

apiVersion: tekton.dev/v1
kind: Pipeline
metadata:
  creationTimestamp: '2025-06-16T16:10:34Z'
  generation: 4
  managedFields:
    - apiVersion: tekton.dev/v1
      fieldsType: FieldsV1
      fieldsV1:
        'f:spec':
          .: {}
          'f:tasks': {}
          'f:workspaces': {}
      manager: Mozilla
      operation: Update
      time: '2025-06-17T14:02:19Z'
  name: git-clone
  namespace: acmeair-project
  resourceVersion: '135906972'
  uid: 5efd0a16-792d-40c6-9cf2-0561b9c7a9dd
spec:
  tasks:
    - name: clone
      params:
        - name: URL
          value: 'https://github.ibm.com/LinuxCoC/Acme-Air-3.0.git'
        - name: REVISION
          value: MQ_SorinDev
        - name: DELETE_EXISTING
          value: 'true'
      taskRef:
        params:
          - name: kind
            value: task
          - name: name
            value: git-clone
          - name: namespace
            value: openshift-pipelines
        resolver: cluster
      workspaces:
        - name: output
          workspace: shared-ws
  workspaces:
    - name: shared-ws

• Pipeline error:

---> Phase: Cloning 'https://github.ibm.com/LinuxCoC/Acme-Air-3.0.git' into '/workspace/output/'...
+ exec git-init -url=https://github.ibm.com/LinuxCoC/Acme-Air-3.0.git -revision=MQ_SorinDev -refspec= -path=/workspace/output/ -sslVerify=true -submodules=true -depth=1 -sparseCheckoutDirectories=
{"level":"error","ts":1750257518.6948926,"caller":"git/git.go:53","msg":"Error running git [remote get-url origin]: exit status 2\nerror: No such remote 'origin'\n","stacktrace":"github.com/tektoncd-catalog/git-clone/git-init/git.run\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/git/git.go:53\ngithub.com/tektoncd-catalog/git-clone/git-init/git.Fetch\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/git/git.go:109\nmain.main\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/main.go:52\nruntime.main\n\t/usr/lib/golang/src/runtime/proc.go:272"}
{"level":"error","ts":1750257543.5860465,"caller":"git/git.go:53","msg":"Error running git [fetch --recurse-submodules=yes --depth=1 origin --update-head-ok --force MQ_SorinDev]: exit status 128\nfatal: could not open '.git/objects/pack/tmp_pack_NEZzSg' for reading: Permission denied\nfatal: fetch-pack: invalid index-pack output\n","stacktrace":"github.com/tektoncd-catalog/git-clone/git-init/git.run\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/git/git.go:53\ngithub.com/tektoncd-catalog/git-clone/git-init/git.Fetch\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/git/git.go:166\nmain.main\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/main.go:52\nruntime.main\n\t/usr/lib/golang/src/runtime/proc.go:272"}
{"level":"fatal","ts":1750257543.5861356,"caller":"git-init/main.go:53","msg":"Error fetching git repository: failed to fetch [MQ_SorinDev]: exit status 128","stacktrace":"main.main\n\t/go/src/github.com/tektoncd-catalog/git-clone/image/git-init/main.go:53\nruntime.main\n\t/usr/lib/golang/src/runtime/proc.go:272"}

[demola09]

Hi! I'm interested in working on this issue as a first-time contributor. Could you please assign it to me?

[Sorin020]

Hi! I'm interested in working on this issue as a first-time contributor. Could you please assign it to me?

I am not sure if I specifically have permissions to assign the issue to you. Sorry.

[AlanGreene]

/assign @demola09