Uploaded image for project: 'Red Hat OpenShift Dev Spaces (formerly CodeReady Workspaces) '
  1. Red Hat OpenShift Dev Spaces (formerly CodeReady Workspaces)
  2. CRW-1254

ubi8-minimal image is not mirrored for airgap

    XMLWordPrintable

Details

    • False
    • False
    • Undefined
    • Workaround Exists
    • Hide

      Mirror the image manually:

      skopeo copy --all docker://registry.stage.redhat.io/ubi8-minimal@sha256:5cfbaf45ca96806917830c183e9f37df2e913b187aadb32e89fd83fa455ebaa6 docker://${INTERNAL_REGISTRY}/ubi8-minimal

      And add new rule for ubi8-minimal to imageContentSourcePolicy (or edit the imageContentSourcePolicy directly on cluster, if it was already created):

          - mirrors:
      - ${INTERNAL_REGISTRY}/ubi8-minimal
      source: registry.stage.redhat.io/ubi8-minimal
      Show
      Mirror the image manually: skopeo copy --all docker://registry.stage.redhat.io/ubi8-minimal@sha256:5cfbaf45ca96806917830c183e9f37df2e913b187aadb32e89fd83fa455ebaa6 docker://${INTERNAL_REGISTRY}/ubi8-minimal And add new rule for ubi8-minimal to imageContentSourcePolicy (or edit the imageContentSourcePolicy directly on cluster, if it was already created): - mirrors: - ${INTERNAL_REGISTRY}/ubi8-minimal source: registry.stage.redhat.io/ubi8-minimal
    • Hide

      Just do whatever documentation says https://docs.openshift.com/container-platform/4.5/operators/admin/olm-restricted-networks.html

      1. oc adm catalog build --appregistry-org redhat-operators-stage --to=${INTERNAL_REGISTRY}/olm/redhat-operators-stage:v1 -a ${REG_CREDS} --insecure --auth-token "${AUTH_TOKEN}" --from=registry.redhat.io/openshift4/ose-operator-registry:v4.5
      2. oc adm catalog mirror ${INTERNAL_REGISTRY}/olm/redhat-operators-stage:v1 ${INTERNAL_REGISTRY} -a ${REG_CREDS} --insecure --manifests-only
      3. Note, that ubi8-minimal is missing from both mappings.txt and imageContentSourcePolicy.yaml

      Possible workaround might be to use registry.redhat.io/ubi8/ubi-minimal instead of registry.redhat.io/ubi8-minimal.

      Show
      Just do whatever documentation says https://docs.openshift.com/container-platform/4.5/operators/admin/olm-restricted-networks.html oc adm catalog build --appregistry-org redhat-operators-stage --to=${INTERNAL_REGISTRY}/olm/redhat-operators-stage:v1 -a ${REG_CREDS} --insecure --auth-token "${AUTH_TOKEN}" --from=registry.redhat.io/openshift4/ose-operator-registry:v4.5 oc adm catalog mirror ${INTERNAL_REGISTRY}/olm/redhat-operators-stage:v1 ${INTERNAL_REGISTRY} -a ${REG_CREDS} --insecure --manifests-only Note, that ubi8-minimal is missing from both mappings.txt and imageContentSourcePolicy.yaml Possible workaround might be to use registry.redhat.io/ubi8/ubi-minimal instead of registry.redhat.io/ubi8-minimal.

    Description

      Seems like `oc adm catalog mirror` can't handle images which are not in format `<registry>/<org/repo>/<image>`. The command just quietly prints out message:

      errors during mirroring. the full contents of the catalog may not have been mirrored: [couldn't parse image path components for mirroring (registry.stage.redhat.io/ubi8-minimal@sha256:d5fd7063f568804e3e0500badd1c6e5134d4f0b24b748d58dfbf43d95b896daf), skipping mirror, couldn't parse image path components for mirroring (registry.stage.redhat.io/ubi8-minimal@sha256:9285da611437622492f9ef4229877efe302589f1401bbd4052e9bb261b3d4387), skipping mirror, couldn't parse image path components for mirroring (registry.stage.redhat.io/codeready-workspaces-operator:2.3), skipping mirror, couldn't parse image path components for mirroring (registry.stage.redhat.io/ubi8-minimal@sha256:5cfbaf45ca96806917830c183e9f37df2e913b187aadb32e89fd83fa455ebaa6), skipping mirror]

      This error is quite hiddine under ton of "normal" output.

      So if user didn't notice this problem, he'll configure mirroring without ubi8-minimal image which results in any workspace not being able to start.

      Attachments

        Activity

          People

            nickboldt Nick Boldt
            rhopp@redhat.com Radim Hopp
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: