-
Bug
-
Resolution: Done-Errata
-
Critical
-
None
-
None
-
None
-
False
-
-
False
-
-
Describe the bug
Pod authconfig-migrator references an image without digest in authorino-operator-v1.1.2 (in v1.1.1 there is no such job/pod)
NAMESPACE NAME READY STATUS RESTARTS AGE openshift-operators authconfig-migrator-qqttz 0/1 ImagePullBackOff 0 2m41
caused by
Back-off pulling image "registry.redhat.io/openshift4/ose-cli-rhel9"
where the image is missing its digest.
This is a problem in air-gapped environment.
To Reproduce
Steps to reproduce the behavior:
1. Install authorino-operator v1.1.2
2. Check image references in `authconfig-migrator` pod
Expected behavior
The pod should reference an image with a digest
Workaround if you don't need the authorino upgrade
oc delete job -n openshift-operators authconfig-migrator
Potential Full Workaround (not yet verified)
- Manually tag the problematic image in your image registry with the tag latest
- Migrate from ImageContentSourcePolicy to ImageDigestMirrorSet / ImageTagMirrorSet (if not already done)
- Manually apply this resource
apiVersion: config.openshift.io/v1 kind: ImageTagMirrorSet metadata: name: itms-operator-0 spec: imageTagMirrors: - mirrors: - customer-mirror-registry.com:8443/openshift4 source: registry.redhat.io/openshift4 status: {}
The above ImageTagMirrorSet will automatically enable tag references for all registry.redhat.io/openshift4 images.
TODO: Check if we can specify the full image name, i.e. registry.redhat.io/openshift4/ose-cli-rhel9 to reduce the scope.
- links to
-
RHEA-2025:149445 Authorino 1.1.3 Tech Preview Release