-
Bug
-
Resolution: Not a Bug
-
Normal
-
None
-
4.15, 4.17.z, 4.16.z, 4.18.0
-
Quality / Stability / Reliability
-
False
-
-
None
-
Critical
-
No
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Description of problem:
when image registry re-enabled after disabled on 4.15 ROSA Hosted Control Planes, the pull secrets for service accounts are not automatically created for new namespaces, not added pull secrets back for old namespaces neither.
Version-Release number of selected component (if applicable):
4.15.15
How reproducible:
always
Steps to Reproduce:
1.Disable Image registry in ROSA HCP
$ oc patch configs.imageregistry.operator.openshift.io/cluster --type merge -p '{"spec":{"managementState":"Removed"}}'
2.Re-enable the image registry after mins
$ oc patch configs.imageregistry.operator.openshift.io/cluster --type merge -p '{"spec":{"managementState":"Managed"}}'
3.Check the pull secrets of default,builder,deployer service account for the new creating namespaces
4.Check the existing namespaces which are created when disabled image-registry
Actual results:
3.$oc get config.image/cluster -o jsonpath='{.spec.managementState}'
Managed
$oc new-project test
$oc get sa -n test
NAME SECRETS AGE
builder 0 101s
default 0 101s
deployer 0 101s
$ oc get secret -n test
No resources found in test namespace
4. oc get sa -n wxj
NAME SECRETS AGE
builder 0 23h
default 0 23h
deployer 0 23h
xiuwang@Xiuwangs-MacBook-Pro ~ % oc get secret -n wxj
No resources found in wxj namespace.
Expected results:
Should create pull secrets for namespace service accounts automaticlly after re-enable image-registry.
Additional info:
- is duplicated by
-
OCPBUGS-58168 "dockercfg" secrets are not getting generated automatically while creating a new project in HCP
-
- Closed
-
- relates to
-
OCPBUGS-32110 ROSA HCP openshift-controller-manager controllers for image registry are not disabled when managementState is Removed
-
- Closed
-