Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Normal
Fix Version/s: None
Affects Version/s: mto-1.2
Component/s: Multiarch-Tuning-Operator
Labels:
None

Activity Type:
Quality / Stability / Reliability
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Story Points:
None
Severity:
None

Target Version:
None
Release Blocker:
None
Sprint:
None

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Release Note Status:
None
Release Note Type:
None
Release Note Text:
None

The multiarch-tuning-operator's image inspector incorrectly processes fully-qualified internal registry images (e.g., `image-registry.openshift-image-registry.svc:5000/namespace/image@sha256:...`) as short names, causing it to attempt pulling from external registries instead of the specified internal registry.

Environment

OpenShift CI (Prow)
Cluster with multi-architecture support (amd64 + arm64)

Expected Behavior

The operator should:
1. Recognize the image reference as fully-qualified (contains registry domain with port)
2. Connect directly to `image-registry.openshift-image-registry.svc:5000`
3. Successfully retrieve the manifest and inspect the image architectures
4. Set appropriate node affinity based on the image's supported architectures

Actual Behavior

The operator attempts to pull the manifest from unqualified-search registries:

Failed to retrieve the supported architectures: 2 errors occurred while pulling:

 * reading manifest sha256:d69e35f73b1e5c0bc2e12a95440a0ddb7976b5a69eb0b7c5a0772f0d954b1a57 in registry.access.redhat.com/image-registry.openshift-image-registry.svc: name unknown: Repo not found
 * reading manifest sha256:d69e35f73b1e5c0bc2e12a95440a0ddb7976b5a69eb0b7c5a0772f0d954b1a57 in docker.io/library/image-registry.openshift-image-registry.svc: requested access to the resource is denied

 message: {"level":"error","ts":"2025-11-04T18:57:29Z","logger":"manager","msg":"Unable to set the node affinity for the pod.","controller":"pod","controllerGroup":"","controllerKind":"Pod","Pod":{"name":"install-yamls-deploy-openstack-k8s-operators-deploy","namespace":"ci-op-gdrr450x"},"namespace":"ci-op-gdrr450x","name":"install-yamls-deploy-openstack-k8s-operators-deploy","reconcileID":"da3de0cd-16de-4d5c-af4c-a58f6dd0d126","error":"2 errors occurred while pulling:\n * reading manifest sha256:38064a6677adaaa4741ecbf070ece8137b3963a932f2828e5971ff04f69dfc31 in registry.access.redhat.com/image-registry.openshift-image-registry.svc: name unknown: Repo not found\n * reading manifest sha256:38064a6677adaaa4741ecbf070ece8137b3963a932f2828e5971ff04f69dfc31 in docker.io/library/image-registry.openshift-image-registry.svc: requested access to the resource is denied","stacktrace":"github.com/openshift/multiarch-tuning-operator/controllers/podplacement.(*Pod).handleError\n\t/workspace/controllers/podplacement/pod_model.go:387\ngithub.com/openshift/multiarch-tuning-operator/controllers/podplacement.(*PodReconciler).processPod\n\t/workspace/controllers/podplacement/pod_reconciler.go:130\ngithub.com/openshift/multiarch-tuning-operator/controllers/podplacement.(*PodReconciler).Reconcile\n\t/workspace/controllers/podplacement/pod_reconciler.go:87\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/workspace/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/workspace/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:334\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/workspace/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:294\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func2.2\n\t/workspace/vendor/sigs.k8s.io/controller-runtime/pkg/internal/controller/controller.go:255"}