Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-10612

oc commands should use podman credentials by default instead of docker ones

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done-Errata
    • Undefined
    • 4.14.0
    • 4.13.0
    • oc
    • None
    • No
    • False
    • Hide

      None

      Show
      None
    • Hide
      REMOVED:

      Support for `~/.docker/config.json` or other docker authentication file locations is deprecated in favor of podman authentication file locations. The default is `${XDG_RUNTIME_DIR}/containers/auth.json`; see https://github.com/containers/image/blob/main/docs/containers-auth.json.5.md for the order of podman config locations. The `oc registry login` command will store the new credentials there. Commands that read registry credentials like `oc image` or `oc adm release` will first look them up in the podman locations as described, and will fall back to `${HOME}/.docker/config.json` if the credentials are not found.




      DEPRECATED:

      The REGISTRY_AUTH_PREFERENCE environment variable is deprecated and will be removed in a future release in favor of the `podman` behavior.
      Show
      REMOVED: Support for `~/.docker/config.json` or other docker authentication file locations is deprecated in favor of podman authentication file locations. The default is `${XDG_RUNTIME_DIR}/containers/auth.json`; see https://github.com/containers/image/blob/main/docs/containers-auth.json.5.md for the order of podman config locations. The `oc registry login` command will store the new credentials there. Commands that read registry credentials like `oc image` or `oc adm release` will first look them up in the podman locations as described, and will fall back to `${HOME}/.docker/config.json` if the credentials are not found. DEPRECATED: The REGISTRY_AUTH_PREFERENCE environment variable is deprecated and will be removed in a future release in favor of the `podman` behavior.
    • Removed Functionality

    Description

      Description of problem:

      In 4.10 we added an option REGISTRY_AUTH_PREFERENCE to opt-in for podman registry auth file prefence reading order. This is important for oc registry commands like oc registry login and oc image. https://github.com/openshift/oc/pull/893
      
      We also started warning users that we will remove support for docker order and default to podman order - meaning we will check podman locations first and then we will fallback to docker locations.
      
      

      Version-Release number of selected component (if applicable):

       

      How reproducible:

       

      Steps to Reproduce:

      1.
      2.
      3.
      

      Actual results:

       

      Expected results:

      We should default to podman auth file locations and remove a warning when using oc registry login or oc image commands without REGISTRY_AUTH_PREFERENCE variable.

      Additional info:

       

      Attachments

        Activity

          People

            fkrepins@redhat.com Filip Krepinsky
            fkrepins@redhat.com Filip Krepinsky
            ying zhou ying zhou
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: