Uploaded image for project: 'OpenShift API for Data Protection'
  1. OpenShift API for Data Protection
  2. OADP-1487

Restoring pod using image from openshift build randomly ImagePullBackoff

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False
    • QE - Ack
    • oadp-velero-plugin-container-1.1.4-1
    • ToDo
    • 0
    • 0
    • Very Likely
    • 0
    • None
    • Unset
    • Unknown
    • No

      Description of problem:

      When a restore containing pod with dockerReference from internal registry source image, it is possible to end up with ImagePullBackoff due to openshift-velero-plugin using dockercfg secret not belonging to destination service account in the destination namespace.

      Version-Release number of selected component (if applicable):

      How reproducible:

      50% chance when restoring for the first time from a namespace that has never been backedup.
      Chances goes up as namespace is subsequently backedup and restored bringing over with them more and more outdated secrets no longer belonging to destination namespace service account.

      Steps to Reproduce:
      1. create manifests from https://github.com/openshift/oadp-operator/blob/master/tests/e2e/sample-applications/mongo-persistent/mongo-persistent.yaml and https://github.com/openshift/oadp-operator/blob/master/tests/e2e/sample-applications/mongo-persistent/pvc/aws.yaml
      2. Create Backup
      3. Restore

      Actual results:

      Randomly restore would result in pod that has Auth error imagepullbackoff

      Expected results:

      There would never be auth error related imagepullbackoff
      Additional info:

        There are no Sub-Tasks for this issue.

            tkaovila@redhat.com Tiger Kaovilai
            tkaovila@redhat.com Tiger Kaovilai
            Shahaf Bahar Shahaf Bahar
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: