Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-50554

Mirroring releases using oc-mirror v1 fails with error unable to read keyring with armor openpgp: invalid data: user ID self-signature invalid: openpgp: invalid signature: RSA verification failure

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Obsolete
    • Icon: Undefined Undefined
    • None
    • 4.17.z, 4.18.0
    • oc-mirror
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • Important
    • Yes
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      when trying to mirror releases via oc-mirror v1 it fails with the error below
      error: error retrieving mapping information for quay.io/openshift-release-dev/ocp-release@sha256:a5bfe05de4c9a5cf4a5609105c539e6f8ba92731f068f13bbac94ceb855ce1d7: Unable to load configmap verifier: the config map openshift-config-managed/release-verification has an invalid key "verifier-public-key-redhat" that must be a GPG public key: unable to read keyring with armor (openpgp: invalid data: user ID self-signature invalid: openpgp: invalid signature: RSA verification failure) or without armor (openpgp: invalid data: tag byte does not have MSB set): unable to read keyring with armor (openpgp: invalid data: user ID self-signature invalid: openpgp: invalid signature: RSA verification failure) or without armor (openpgp: invalid data: tag byte does not have MSB set)
          

      Version-Release number of selected component (if applicable):

          4.17.15
          

      How reproducible:

          Always
          

      Steps to Reproduce:

          1. Use the imageSetConfig as shown below
          2. Run command `oc-mirror -c /tmp/isc.yaml file://test`
          3.
          

      Actual results:

          Mirroring fails with error as shown in the description and this is a regression as i see this works fine with the previous 4.17 release before the fix https://issues.redhat.com/browse/OCPBUGS-47453
          

      Expected results:

          Mirroring should not fail with v1 for both 4.17 and 4.18
          

      Additional info:

          kind: ImageSetConfiguration
      apiVersion: mirror.openshift.io/v1alpha2
      storageConfig:
        registry:
          imageURL: quay.skynet/ocp1617/ocp
          skipTLS: true
      mirror:
        platform:
          channels:
          - name: stable-4.16
            minVersion: 4.16.17
            maxVersion: 4.16.17
            type: ocp
          graph: true
        operators:
        - catalog: registry.redhat.io/redhat/redhat-operator-index:v4.16
          packages:
            - name: openstack-operator
              channels:
              - name: stable-v1.0
                minVersion: 1.0.0
                maxVersion: 1.0.6
          

              Unassigned Unassigned
              knarra@redhat.com Rama Kasturi Narra
              None
              None
              Ying Zhou Ying Zhou
              None
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: