Uploaded image for project: 'Connectivity Link'
  1. Connectivity Link
  2. CONNLINK-425

Pod authconfig-migrator references an image without digest in authorino-operator-v1.1.2

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Critical Critical
    • None
    • None
    • Authorino
    • None
    • False
    • Hide

      None

      Show
      None
    • False

      Describe the bug
      Pod authconfig-migrator references an image without digest in authorino-operator-v1.1.2 (in v1.1.1 there is no such job/pod)

      NAMESPACE                                          NAME                                                                    READY   STATUS             RESTARTS        AGE
      openshift-operators                                authconfig-migrator-qqttz                                               0/1     ImagePullBackOff   0               2m41
      

      caused by

      Back-off pulling image "registry.redhat.io/openshift4/ose-cli-rhel9"
      

      where the image is missing its digest.

      This is a problem in air-gapped environment.

      To Reproduce
      Steps to reproduce the behavior:
      1. Install authorino-operator v1.1.2
      2. Check image references in `authconfig-migrator` pod

      Expected behavior
      The pod should reference an image with a digest

      Workaround if you don't need the authorino upgrade

      oc delete job -n openshift-operators authconfig-migrator
      

      Potential Full Workaround (not yet verified)

      1. Manually tag the problematic image in your image registry with the tag latest
      2. Migrate from ImageContentSourcePolicy to ImageDigestMirrorSet / ImageTagMirrorSet (if not already done)
      3. Manually apply this resource
        apiVersion: config.openshift.io/v1
        kind: ImageTagMirrorSet
        metadata:
          name: itms-operator-0
        spec:
          imageTagMirrors:
          - mirrors:
            - customer-mirror-registry.com:8443/openshift4
            source: registry.redhat.io/openshift4
        status: {}
        

        The above ImageTagMirrorSet will automatically enable tag references for all registry.redhat.io/openshift4 images.

      TODO: Check if we can specify the full image name, i.e. registry.redhat.io/openshift4/ose-cli-rhel9 to reduce the scope.

              mcassola Guilherme Cassolato
              apodhrad@redhat.com Andrej Podhradsky
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: