Any way to build Docker images with containerMode=kubernetes?

[elcidowneador]

Hello, i'm trying to build Docker images using docker/setup-buildx-action@v2 with kubernetes driver and also docker/build-push-action@v4 action, but i'm getting this error:

Error: buildx failed with: ERROR: error for bootstrap "builder-40aacad7-1de4-4b62-9dfd-275a9139c7690": deployments.apps "builder-40aacad7-1de4-4b62-9dfd-275a9139c7690" is forbidden: User "system:serviceaccount:gha-runner:gha-runner-default-gha-rs-kube-mode" cannot get resource "deployments" in API group "apps" in the namespace "gha-runner"

This is happening because the role created by default don't add deployments permissions, but does not allow customizations neither.

Someone was able to achieve without forking the chart?

[omri-shilton]

we would also like to know if thats possible

[maljolani]

do you have a solution for it

[alextweneymackenzie-ibi]

I create my own service account, role, and role binding, then set template.spec.serviceAccountName. This lets me create containers using Kubernetes mode.

[diegoara96]

Hi @elcidowneador , you can't use the docker daemon in kubernetes mode. I use kaniko to generate my images and it works fine, it is intended for this same purpose, to run without daemon. You have several tutorials on the internet on how to create your actions with this. https://github.com/GoogleContainerTools/kaniko

[oradwell]

we use buildkit daemon on the Kubernetes cluster and the workflow pods connect to it to build containers. you're also able to use the docker actions with it.