Failed to pull tekton image

[coolbaluk]

Hello,

Started getting this today, where my pipeline fails to pull the git-init tekton image itself.

Is this a configuration issue on my side or something has happened to the image?

task fetch-from-git has failed: the step "clone" in TaskRun "service-resource-deploy-dmbq2-fetch-from-git" failed to pull the image "". The pod errored with the message: "Back-off pulling image "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/git-init:v0.29.0": ErrImagePull: failed to pull and unpack image "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/git-init:v0.29.0": failed to resolve reference "gcr.io/tekton-releases/github.com/tektoncd/pipeline/cmd/git-init:v0.29.0": failed to authorize: failed to fetch oauth token: unexpected status from GET request to https://gcr.io/v2/token?scope=repository%3Atekton-releases%2Fgcr.io%2Fgithub.com%2Ftektoncd%2Fpipeline%2Fcmd%2Fgit-init%3Apull&scope=repository%3Atekton-releases%2Fgithub.com%2Ftektoncd%2Fpipeline%2Fcmd%2Fgit-init%3Apull&service=gcr.io: 403 Forbidden."

[afrittoli]

Hello @coolbaluk - thanks for your issue report.

The issue you're seeing is because we removed access from the gcr.io repos in Tekton, in favour of ghcr.io (see for more context https://groups.google.com/g/tekton-users/c/YCktL5EZEsE/m/3fafRUgsCQAJ).

The exact same image is available at ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/git-init:v0.29.0.

[tomislater]

We are also experiencing this issue, and it has become a blocker for our team. I do not have access to the group mentioned. Would it be possible to revert the recent change temporarily to give users more time to adapt?

[coolbaluk]

Thanks, figured it out eventually. I patched the pipeline and now it works.

Feel free to close this issue but I assume other people might be blocked as well

[afrittoli]

@tomislater I'm sorry to hear this is causing an issue for you.

We announced the upcoming change on Slack, via email (Google group) on the tekton.dev website and on the individual repos' READMEs. The first announcements were sent at the beginning of 2025.

The Google group is open for joining.
Unfortunately, the project has no infrastructure budget left to pay for egress bandwidth, so we cannot continue to allow downloads. The same image is available at ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/git-init:v0.29.0, could you pull it from there instead?

I will investigate if it's possible to restore the git-init image alone until you're able to switch to ghcr.io.

[afrittoli]

@tomislater ACLs are set at repo level and I cannot re-enable access to a single image unfortunately. Are you able to use ghcr.io/tektoncd/github.com/tektoncd/pipeline/cmd/git-init:v0.29.0 instead? Alternatively, would you be able to ping me on Slack? We can try to find a solution to unblock you.

[tomislater]

For us the problem is that we need access to more images. We need to fix that on our side. I just thought that maybe you could revert this change, but if that is not possible we need to start using new repo right now.

[afrittoli]

@tomislater Thank you for your understanding. All historical and new Tekton images are available on ghcr.io.
For images that were initially published to gcr.io, you can replace the gcr.io/tekton-teleases part with ghcr.io/tektoncd and you will be able to pull the image.

[elsergo]

@afrittoli Hi! please tell me what the image from the new registry is called now? gcr.io/tekton-releases/dogfooding/tkn@sha256:025de221fb059ca24a3b2d988889ea34bce48dc76c0cf0d6b4499edb8c21325f

[afrittoli]

@afrittoli Hi! please tell me what the image from the new registry is called now? gcr.io/tekton-releases/dogfooding/tkn@sha256:025de221fb059ca24a3b2d988889ea34bce48dc76c0cf0d6b4499edb8c21325f

Thanks @elsergo - the tkn image is still available on gcr.io for now, as the move to ghcr.io is still in progress - FYI @vdemeester

[vdemeester]

@afrittoli @elsergo I got mirrored here : https://github.com/tektoncd/plumbing/pkgs/container/plumbing%2Ftkn
But indeed we are going to build it directly from tektoncd/cli in the near future.