AWS CodeBuild BUILD_CONTAINER_UNABLE_TO_PULL_IMAGE 错误

Question

我正在尝试在我的 CodeBuild 定义中使用自定义图像，但它失败并出现以下错误：

BUILD_CONTAINER_UNABLE_TO_PULL_IMAGE：无法拉取客户的 容器图像。 Asm 获取用户名：AuthorizationData 是 格式错误的空字段

terraform 定义如下：

resource "aws_codebuild_project" "apply" {
  name          = local.names.apply_codebuild
  description   = "Responsible for 'apply' of CodeBuild '${local.names.apply_codebuild}'"
  build_timeout = "120"
  service_role  = aws_iam_role.apply.arn

  artifacts {
    type = "CODEPIPELINE"
  }

  environment {
    compute_type                = "BUILD_GENERAL1_SMALL"
    image                       = "docker.cloudsmith.io/myorg/devops/amazonlinux2-custom:latest"
    type                        = "LINUX_CONTAINER"
    image_pull_credentials_type = "SERVICE_ROLE"
    
    registry_credential {
      credential  = "CLOUDSMITH_API_KEY"
      credential_provider = "SECRETS_MANAGER"
    }
  }

  source {
    type = "CODEPIPELINE"
    buildspec = templatefile("${path.module}/buildspecs/apply.yml", {
      SCRIPT           = local.apply_script
      NAME             = var.name
      RUNTIME_VERSIONS = var.runtime_versions
    })
  }
}

关于可能是什么问题的任何想法？

Answer 1

问题是 Cloudsmith 要求提供用户名和 API 密钥，而不仅仅是 API 密钥。 CLOUDSMITH_API_KEY 密钥仅包含 API 密钥。添加username 和API-key as password 后，它工作了。