Description of problem:
when trying to mirror releases via oc-mirror v1 it fails with the error below error: error retrieving mapping information for quay.io/openshift-release-dev/ocp-release@sha256:a5bfe05de4c9a5cf4a5609105c539e6f8ba92731f068f13bbac94ceb855ce1d7: Unable to load configmap verifier: the config map openshift-config-managed/release-verification has an invalid key "verifier-public-key-redhat" that must be a GPG public key: unable to read keyring with armor (openpgp: invalid data: user ID self-signature invalid: openpgp: invalid signature: RSA verification failure) or without armor (openpgp: invalid data: tag byte does not have MSB set): unable to read keyring with armor (openpgp: invalid data: user ID self-signature invalid: openpgp: invalid signature: RSA verification failure) or without armor (openpgp: invalid data: tag byte does not have MSB set)
Version-Release number of selected component (if applicable):
4.17.15
How reproducible:
Always
Steps to Reproduce:
1. Use the imageSetConfig as shown below 2. Run command `oc-mirror -c /tmp/isc.yaml file://test` 3.
Actual results:
Mirroring fails with error as shown in the description and this is a regression as i see this works fine with the previous 4.17 release before the fix https://issues.redhat.com/browse/OCPBUGS-47453
Expected results:
Mirroring should not fail with v1 for both 4.17 and 4.18
Additional info:
kind: ImageSetConfiguration apiVersion: mirror.openshift.io/v1alpha2 storageConfig: registry: imageURL: quay.skynet/ocp1617/ocp skipTLS: true mirror: platform: channels: - name: stable-4.16 minVersion: 4.16.17 maxVersion: 4.16.17 type: ocp graph: true operators: - catalog: registry.redhat.io/redhat/redhat-operator-index:v4.16 packages: - name: openstack-operator channels: - name: stable-v1.0 minVersion: 1.0.0 maxVersion: 1.0.6
- is caused by
-
OCPBUGS-47453 oc-mirror V2 fails on FIPS enabled and STIG compliant RHEL 9 system
-
- Closed
-