-
Bug
-
Resolution: Done-Errata
-
Critical
-
4.15.z
Description of problem:
When mirroring content with oc-mirror v2, some required images for OpenShift installation are missing from the registry
Version-Release number of selected component (if applicable):
OpenShift installer version: v4.15.17 [admin@registry ~]$ oc-mirror version WARNING: This version information is deprecated and will be replaced with the output from --short. Use --output=yaml|json to get the full version. Client Version: version.Info{Major:"", Minor:"", GitVersion:"4.16.0-202406131906.p0.g7c0889f.assembly.stream.el9-7c0889f", GitCommit:"7c0889f4bd343ccaaba5f33b7b861db29b1e5e49", GitTreeState:"clean", BuildDate:"2024-06-13T22:07:44Z", GoVersion:"go1.21.9 (Red Hat 1.21.9-1.el9_4) X:strictfipsruntime", Compiler:"gc", Platform:"linux/amd64"}
How reproducible:
Use oc-mirror v2 to mirror content. $ cat imageset-config-ocmirrorv2-v4.15.yaml kind: ImageSetConfiguration apiVersion: mirror.openshift.io/v2alpha1 mirror: platform: channels: - name: stable-4.15 minVersion: 4.15.17 type: ocp operators: - catalog: registry.redhat.io/redhat/redhat-operator-index:v4.15 full: false packages: - name: ansible-automation-platform-operator - name: cluster-logging - name: datagrid - name: devworkspace-operator - name: multicluster-engine - name: multicluster-global-hub-operator-rh - name: odf-operator - name: quay-operator - name: rhbk-operator - name: skupper-operator - name: servicemeshoperator - name: submariner - name: lvms-operator - name: odf-lvm-operator - catalog: registry.redhat.io/redhat/certified-operator-index:v4.15 full: false packages: - name: crunchy-postgres-operator - name: nginx-ingress-operator - catalog: registry.redhat.io/redhat/community-operator-index:v4.15 full: false packages: - name: argocd-operator - name: cockroachdb - name: infinispan - name: keycloak-operator - name: mariadb-operator - name: nfs-provisioner-operator - name: postgresql - name: skupper-operator additionalImages: - name: registry.redhat.io/ubi8/ubi:latest - name: registry.access.redhat.com/ubi8/nodejs-18 - name: registry.redhat.io/openshift4/ose-prometheus:v4.14.0 - name: registry.redhat.io/service-interconnect/skupper-router-rhel9:2.4.3 - name: registry.redhat.io/service-interconnect/skupper-config-sync-rhel9:1.4.4 - name: registry.redhat.io/service-interconnect/skupper-service-controller-rhel9:1.4.4 - name: registry.redhat.io/service-interconnect/skupper-flow-collector-rhel9:1.4.4 helm: {} Run oc-mirror using the command: oc-mirror --v2 \ -c imageset-config-ocmirrorv2-v4.15.yaml \ --workspace file:////data/oc-mirror/workdir/ \ docker://registry.local.momolab.io:8443/mirror
Steps to Reproduce:
1. Install Red Hat Quay mirror registry 2. Mirror using oc-mirror v2 command and steps above 3. Install OpenShift
Actual results:
Installation fails
Expected results:
Installation succeeds
Additional info:
## Check logs on coreos: [core@sno1 ~]$ journalctl -b -f -u release-image.service -u bootkube.service Jul 02 03:46:22 sno1.local.momolab.io bootkube.sh[13486]: Error: initializing source docker://quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06: (Mirrors also failed: [registry.local.momolab.io:8443/mirror/openshift/release@sha256:f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06: reading manifest sha256:f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06 in registry.local.momolab.io:8443/mirror/openshift/release: name unknown: repository not found]): quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06: reading manifest sha256:f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06 in quay.io/openshift-release-dev/ocp-v4.0-art-dev: unauthorized: access to the requested resource is not authorized ## Check if that image was pulled: [admin@registry ~]$ cat /data/oc-mirror/workdir/working-dir/dry-run/mapping.txt | grep -i f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06 docker://quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06=docker://registry.local.momolab.io:8443/mirror/openshift-release-dev/ocp-v4.0-art-dev@sha256:f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06 ## Problem is, it doesn't exist on the registry (also via UI): [admin@registry ~]$ podman pull registry.local.momolab.io:8443/mirror/openshift-release-dev/ocp-v4.0-art-dev@sha256:f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06 Trying to pull registry.local.momolab.io:8443/mirror/openshift-release-dev/ocp-v4.0-art-dev@sha256:f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06... Error: initializing source docker://registry.local.momolab.io:8443/mirror/openshift-release-dev/ocp-v4.0-art-dev@sha256:f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06: reading manifest sha256:f36e139f75b179ffe40f5a234a0cef3f0a051cc38cbde4b262fb2d96606acc06 in registry.local.momolab.io:8443/mirror/openshift-release-dev/ocp-v4.0-art-dev: manifest unknown
- blocks
-
OCPBUGS-37757 Content mirrored with oc-mirror v2 does not push openshift/release images to registry
- Closed
- depends on
-
PROJQUAY-7456 Unable to pull image by digest
- Closed
- is cloned by
-
OCPBUGS-37757 Content mirrored with oc-mirror v2 does not push openshift/release images to registry
- Closed
- links to
-
RHEA-2024:3718 OpenShift Container Platform 4.17.z bug fix update