Uploaded image for project: 'Red Hat Container Development Kit'
  1. Red Hat Container Development Kit
  2. CDK-382

Components from docker.io are being used by CDK 3.7.0

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open (View Workflow)
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 3.7.0
    • Fix Version/s: None
    • Component/s: openshift
    • Labels:
      None
    • Steps to Reproduce:
      Hide

      Block image pull from docker.io for the client executing CDK 3.7.0

      Show
      Block image pull from docker.io for the client executing CDK 3.7.0

      Description

      Our environment allows only to fetch container images that originates from RedHat repositories. All images originating from "docker.io" are considered to be insecure. CDK 3.7.0 in combination with OCP v3.11.43 seems to relay on an image located at docker.io

      openshift/origin-service-serving-cert-signer:v3.11

      https://gist.github.com/pjos/8ff4ee45ab7b8032816f0fbb454a6230

      {{E1212 06:02:08.376631 8806 remote_image.go:108] PullImage "openshift/origin-service-serving-cert-signer:v3.11" from image service failed: rpc error: code = Unknown desc = Get https://registry-1.docker.io/v2/: x509: certificate signed by unknown authority
      E1212 06:02:08.376669 8806 kuberuntime_image.go:51] Pull image "openshift/origin-service-serving-cert-signer:v3.11" failed: rpc error: code = Unknown desc = Get https://registry-1.docker.io/v2/: x509: certificate signed by unknown authority
      E1212 06:02:08.376714 8806 kuberuntime_manager.go:733] container start failed: ErrImagePull: rpc error: code = Unknown desc = Get https://registry-1.docker.io/v2/: x509: certificate signed by unknown authority}}

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            pjos Pawel Josefsson (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated: