-
Bug
-
Resolution: Obsolete
-
Normal
-
None
-
4.17, 4.17.0
-
None
-
Multi-Arch Sprint 258
-
1
-
Rejected
-
False
-
Description of problem:
When "mirrorSourcePolicy: NeverContactSource" enabled in ITMS/IDMS, PPO can still verify arch info from source image
Version-Release number of selected component (if applicable):
multiarch-tuning-operator.v0.9.0
How reproducible:
100%
Steps to Reproduce:
1. Create a ITMS with below content cat <<EOF | oc create -f - apiVersion: config.openshift.io/v1 kind: ImageTagMirrorSet metadata: name: mto-itms-never-test spec: imageTagMirrors: - mirrors: - my-fake-itms-never-registry.io/google_containers/redis source: gcr.io/google_containers/redis mirrorSourcePolicy: NeverContactSource EOF 2. wait for mcp finish updated 3. create a pod to check oc new-project mto-test oc create -f - <<EOF apiVersion: apps/v1 kind: Deployment metadata: name: test-deployment spec: selector: matchLabels: app: hello-openshift replicas: 1 template: metadata: labels: app: hello-openshift spec: containers: - name: hello-openshift image: gcr.io/google_containers/redis:v1 EOF
Actual results:
PPO set node affinity for arch info in pod
Expected results:
the mirror image is unreachable, it's a fake image, and NeverContactSource is enabled, so PPO should not set node affinity.
Additional info: