-
Bug
-
Resolution: Done
-
Normal
-
None
-
4.13.z, 4.12.z, 4.14.z, 4.15.z, 4.16.z
-
Moderate
-
None
-
3
-
OSDOCS Sprint 257
-
1
-
False
-
Description of problem:
In https://docs.openshift.com/container-platform/4.14/installing/install_config/configuring-firewall.html, here we are allowing access.redhat.com in the firewall but the problem is that by default, Cluster Samples Operator pulls images from registry.access.redhat.com. And it's not documented that registry.access.redhat.com should be allowed on firewall. We are not able to pull the images when firewall only has access.redhat.com allowed.
Version-Release number of selected component (if applicable):
How reproducible:
Check the image getting pulled in imagestream:
> oc get imagestreams.image.openshift.io -n openshift ubi8-openjdk-11 -o yaml
~~~
status:
dockerImageRepository: image-registry.openshift-image-registry.svc:5000/openshift/ubi8-openjdk-11
~~~
The images were pulled from registry.access.redhat.com/ubi8/openjdk-11 and was failing until firewall was opened.
Actual results:
There is a firewall error while pulling the images.
Expected results:
There should not be any firewall error. We need to add the wild card for access.redhat.com
Additional info:
