Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-37866

Cannot mirror falcon certified operator when images contain attestation manifests

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • 4.16
    • oc-mirror
    • None
    • False
    • Hide

      None

      Show
      None

      Description of problem:

      
      Cannot mirror falcon certified operator, present in registry. Using this imageset config:
      
      kind: ImageSetConfiguration
      apiVersion: mirror.openshift.io/v1alpha2
      mirror:
        blockedImages:
          # you must block the components from our registry because you do not have credentials
          - name: registry.crowdstrike.com/falcon-container/us-1
          - name: registry.crowdstrike.com/falcon-imageanalyzer/us-1
          - name: registry.crowdstrike.com/falcon-sensor/us-1    
          - name: registry.crowdstrike.com/falcon-kac/us-1/release/falcon-kac
        operators:
        - catalog: registry.redhat.io/redhat/certified-operator-index:v4.16
          packages:
          - name: falcon-operator
            channels:
              - name: certified-1.0
      
      we have this output:
      
      skipping blocked image registry.crowdstrike.com/falcon-container/us-1/release/falcon-sensor@sha256:937e21e72251b45fef5863e19c635fda1425eda619251d1aff599cf29f6b83b7
      skipping blocked image registry.crowdstrike.com/falcon-container/us-1/release/falcon-sensor@sha256:937e21e72251b45fef5863e19c635fda1425eda619251d1aff599cf29f6b83b7
      skipping blocked image registry.crowdstrike.com/falcon-imageanalyzer/us-1/release/falcon-imageanalyzer@sha256:24ebb92c88e8d94fb7f15af2fa803e189da706faf25d3e46c4df87eddd81a91f
      skipping blocked image registry.crowdstrike.com/falcon-imageanalyzer/us-1/release/falcon-imageanalyzer@sha256:24ebb92c88e8d94fb7f15af2fa803e189da706faf25d3e46c4df87eddd81a91f
      skipping blocked image registry.crowdstrike.com/falcon-kac/us-1/release/falcon-kac@sha256:0fa705db5e024d81cae7abefc924c644a1de2574f4e68c95b1bcfb50384ab999
      skipping blocked image registry.crowdstrike.com/falcon-kac/us-1/release/falcon-kac@sha256:0fa705db5e024d81cae7abefc924c644a1de2574f4e68c95b1bcfb50384ab999
      skipping blocked image registry.crowdstrike.com/falcon-sensor/us-1/release/falcon-sensor@sha256:3df250eafdcd0d7773b30037502f685807aab16882a326cca365b08f23dc219e
      skipping blocked image registry.crowdstrike.com/falcon-sensor/us-1/release/falcon-sensor@sha256:3df250eafdcd0d7773b30037502f685807aab16882a326cca365b08f23dc219e
      localhost:5000/
        crowdstrike/falcon-operator-bundle
          blobs:
            registry.connect.redhat.com/crowdstrike/falcon-operator-bundle sha256:cbad0d38796a32d0119b13b2609ff5a8c678042a74b45686736ad8a58df24fe5 4.879KiB
            registry.connect.redhat.com/crowdstrike/falcon-operator-bundle sha256:eb4da8768737b539530dcdbfa91cf139e4e6128eecb614727fb72a4bd513fe45 81.8KiB
          manifests:
            sha256:c40ed623182a800c18598b46d885c61f69327a1deeab261fac4af5d150b1fa89 -> f81d5e0e
        openshift4/ose-kube-rbac-proxy
          blobs:
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:d8190195889efb5333eeec18af9b6c82313edd4db62989bd3a357caca4f13f0e 1.404KiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:54fd50e23884489e441ac80517d8edd91d8d1ed9e63af72a05c56c9de5300e25 1.412KiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:af5a3a5a8f3cc75825262e7d00c612519ced4a4003d2c1ee21e9720934fb1cbd 1.413KiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:5d5771e51f28e6b3e7609ebb505bfb1411539e7725ef4ffb34264b8b731088fd 1.42KiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:bd3725e56098b539f62efac1c155420b1d649be68007395ab8985d9b0de22770 18.78KiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:5215046a3fcd84485ece4dfd3ac3c63afd986a7699572c2083375684d91b7c80 18.78KiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:a30b2d13a6f766b106f1bbf3ddf9284048500d327edd7fe87bbc6fe6f59aca99 18.79KiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:bc0b76f80951ab548d216b17c1cc9f02b8f02532a42a341934a759c852a37b42 18.79KiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:c55aab734dcd0707693a0afe00113b1d45adcf824c3e5b1b8d98c56ea15ead21 11.08MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:074fc2ed421eb6cbe8ff5576a99725f297df6ab1b65b3def4308995da5074306 11.23MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:45cc7252457a76168698735d1e5517ead74c74831ce529ffc9e84cd80088c35b 11.23MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:a15c311eb7fdec638c32f3064b68037dbe62b206db361e891bc6ddc488a33bda 11.91MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:f59e048554a0a3a137a3e7642d4cb0b80030708655f04c18e5448853d714aa6b 21.1MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:6e391540a90c59e9ae4cab20728fcc0258c9be750128aeca19c7a2a08b48eb72 21.34MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:6e6b490a49946b39df53a877ede2d13c747e5c85691e95ebd6ebaa5f124f517e 22.96MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:ecf84bfd3f361cab6a15b3ec5a49066cdec3ce27e6db5cf78127dfb533f1aa82 23.22MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:cb55d859efae03a73fe430db505af2cbf52e44d925bc9ef391838fc4245a34b1 62.71MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:982b29ed0f7da589ab97031896db8abed83bd176f4facd6d8bdf952726d2fcaa 63.82MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:5710fe30c8df3605dd52f70d3a07b8f6d6cea2152359c3e43393b9dd34f82169 64.94MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:6d02c3d9c64844df739dee0106efafe3953d7892cf240e025283560b31a9f9e0 70.02MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:9ed68b94598760816e142fcf7f8e9572af00b5567df5cc818ddb0810919627a6 73.08MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:f1543f27d1312786cff4cf8bd2782de3fc564724417163ae85309360062c3fb2 73.87MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:97da74cc6d8fa5d1634eb1760fd1da5c6048619c264c23e62d75f3bf6b8ef5c4 75.84MiB
            registry.redhat.io/openshift4/ose-kube-rbac-proxy sha256:17e5b635b32014948d8b0ca7f0eb7e4490a834f9022b04a10ef7ee48dd895831 82.1MiB
          manifests:
            sha256:0fbadfe40ab13df8b0f6dedc27f50aab532c87ab138209a88d07c4cc718403c7
            sha256:3e1e43cc533337ec4c0a607c42cabbc90fc9fa18c3d7a31e8b41cc5a4342f1f7
            sha256:855b1164fba56c9213100a6ea34bb336983f2918694c343d2abb16ef6c995c30
            sha256:e14d93bbf8fb315b6976c6af368cb2b423397198bfd9b3cc3be8b74472aeb0d5
            sha256:e31a70c7e16952634f87a124c5a15e0e8507856b6b298d0cd030003cd92b1517
            sha256:e31a70c7e16952634f87a124c5a15e0e8507856b6b298d0cd030003cd92b1517 -> 20229c57
        stats: shared=0 unique=26 size=700.6MiB ratio=1.00
      
      error: unable to retrieve source image registry.connect.redhat.com/crowdstrike/falcon-operator manifest #3 from manifest list: name unknown: Image not found
      error: an error occurred during planning
      
      
      Crowdstrike customer needs help to understand what's faiking here since it's not quite clear.
      
          

      Version-Release number of selected component (if applicable):

       
      
      Client Version: version.Info{Major:"", Minor:"", GitVersion:"4.15.0-202403220516.p0.g9621d8f.assembly.stream.el9-9621d8f", GitCommit:"9621d8f72ecc7a0a13e40b9709b5e19cc621117b", GitTreeState:"clean", BuildDate:"2024-03-22T09:53:28Z", GoVersion:"go1.20.12 X:strictfipsruntime", Compiler:"gc", Platform:"linux/amd64"}
      
          

      How reproducible:

      
      

      always

            luzuccar@redhat.com Luigi Mario Zuccarelli
            rhn-support-gparente German Parente
            ying zhou ying zhou
            Votes:
            1 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated: