The issue stated in the title may be a shortcoming of Crow’s GUI but also very well a misunderstanding on my side. I appreciate help in any case.
I am trying to do a multiarch (arm/amd) build, but figured I had insufficient privileges to do so:
"Schema Errorbuild-acme-dns:steps.build-push
Insufficient security privileges. To allow, check the ‘security’ option in the ‘Privileges & Security’ repository settings."
The issue wasn’t resolved after created a dedicated token on the codefloe side. From what I found I need to trust multiarch builds explicitly on the crow side, too as QEMU needs additional privileges. After switching to a dedicated ARM I did not have the issue anymore which at least confirms my codefloe token is scoped correctly.
I only had one coffee and may not have the sharpest eyes, but I looked several times to find the extra checkbox for that additional ‘trusted’ flag in Crow’s UI. Is it possible granting this is only available to Crow admins?
At least I would:
- in the error message: highlight that this an additional check on Crow’s side, not codefloe.
- tell people that this admin level if that was the case.
- possible add recommendations about multiarch builds somewhere to the docs or even on the agents tab
