Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-17536

Image push from node to registry fails with rejected by policy error in RHOCP4

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • Normal
    • None
    • 4.12.z
    • Containers
    • None
    • Important
    • No
    • False
    • Hide

      None

      Show
      None

    Description

      Description of problem:

      Unable to push image from the node to external registry
      
      Image is present on the node :
      ~~~
      sh-4.4# podman images | grep 0a156d3af178
      ilens-hub.ngmlpp.com/pat/loan                                                 6                       0a156d3af178  4 weeks ago    715 MB
      default-route-openshift-image-registry.adityabirlacapital.com/abhflprod/loan  6                       0a156d3af178  4 weeks ago    715 MB
      ilens-hub.ngmlpp.com/abhflprod/loan                                           6                       0a156d3af178  4 weeks ago    715 MB
      image-registry.openshift-image-registry.svc:5000/abhflprod/loan               6                       0a156d3af178  4 weeks ago    715 MB
      image-registry.openshift-image-registry.svc.cluster.local:5000/abhfl/loan     6                       0a156d3af178  4 weeks ago    715 MB
      ~~~
      
      Getting error while pushing to harbor registry :
      ~~~
      sh-4.4# sudo podman push ilens-hub.ngmlpp.com/abhflprod/loan:6
      Error: Source image rejected: Running image containers-storage:[overlay@/var/lib/containers/storage+/run/containers/storage]@0a156d3af178c25f9c81aeb6dfbcdff8fcc6cd264ca168325d109986f09e90a6 is rejected by policy.
      ~~~
      
      

      Version-Release number of selected component (if applicable):

       

      How reproducible:

      100%

      Steps to Reproduce:

      Actual results:

      Image is not getting pushed from a node to the expected registry with the error "rejected by policy"

      Expected results:

      Image should get pushed from a node to the expected registry

      Additional info:

      On node : $ cat /etc/containers/policy.json
      "ilens-hub.ngmlpp.com":[{"type":"insecureAcceptAnything"}]
      
      Image Controller configuration : $ oc get image.config.openshift.io/cluster -o yaml
        spec:
        registrySources:
          allowedRegistries:
          - ilens-hub.ngmlpp.com

      Attachments

        Issue Links

          Activity

            People

              tsweeney@redhat.com Tom Sweeney
              rhn-support-sdharma Suruchi Dharma
              ying zhou ying zhou
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: