Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-2791

[release-5.4] ElasticSearch operator does not respect referencePolicy when selecting oauth-proxy image

    XMLWordPrintable

Details

    • False
    • None
    • False
    • NEW
    • VERIFIED
    • Hide
      Before this update, the ElasticSearch operator did not respect the referencePolicy property of the ImageStream when selecting an oauth-proxy image, which caused the Kibana deployment to fail in certain environments. With this update, using referencePolicy resolves the issue and the operator can deploy Kibana successfully.
      Show
      Before this update, the ElasticSearch operator did not respect the referencePolicy property of the ImageStream when selecting an oauth-proxy image, which caused the Kibana deployment to fail in certain environments. With this update, using referencePolicy resolves the issue and the operator can deploy Kibana successfully.
    • Log Storage - Sprint 221

    Description

      The feature implemented in LOG-2228 (followed-up by LOG-2679) uses the ImageStream`openshift/oauth-proxy` to select an image to use for the proxy used in the Kibana deployment.

      Currently this implementation uses our own heuristic to select whether to use the internal registry or the public image reference. While this works in most cases, including our test cases for disconnected clusters, it turns out that the current implementation is not suitable for all environments.

      The ImageStream CRD contains a property referencePolicy (docs) which determines which reference should be used for the image.

      The code in elasticsearch-operator should be updated to either make use of the referencePolicy attribute. Alternatively we could switch to using the ImageStreamTag resource instead which has a dockerImageReference property, which is updated automatically to contain the correct image reference based on the referencePolicy of the associated ImageStream.

      Attachments

        Activity

          People

            rh-ee-mbouqsim Mohamed-Amine Bouqsimi
            rojacob@redhat.com Robert Jacob
            Anping Li Anping Li
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: