Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-55449

Adding a node with `oc adm node-image` fails for disconnected environment

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Agent Sprint 270, Agent Sprint 271
    • 2
    • Done
    • Bug Fix
    • Hide
      Currently, when adding a node in a disconnected environment, private registry images are inaccessible for the 'oc adm node-image' command, causing node addition failure due to image pull issues. This error only occurs if the cluster is initially installed with an installer binary downloaded from mirror.openshift.com. With this release, a fix has been implemented enabling successful image pull and node creation in disconnected environments. (link:https://issues.redhat.com/browse/OCPBUGS-55449[OCPBUGS-55449])
      Show
      Currently, when adding a node in a disconnected environment, private registry images are inaccessible for the 'oc adm node-image' command, causing node addition failure due to image pull issues. This error only occurs if the cluster is initially installed with an installer binary downloaded from mirror.openshift.com. With this release, a fix has been implemented enabling successful image pull and node creation in disconnected environments. (link: https://issues.redhat.com/browse/OCPBUGS-55449 [ OCPBUGS-55449 ])
    • None
    • None
    • None
    • None

      This is a clone of issue OCPBUGS-53106. The following is the description of the original issue:

      Description of problem:

          Adding a node with `oc adm node-image` is unable to pull the release image container and fails to generate the new node ISO.

      Version-Release number of selected component (if applicable):

          

      How reproducible:

          100%

      Steps to Reproduce:

          1. Deploy OpenShift cluster with private registry in an offline environment
          2. Create the nodes-config.yaml for new nodes
          3. Run "oc adm node-image create --dir=/tmp/assets
          

      Actual results:

          Command fails with error saying that it cannot pull from quay.io/openshift-release-dev/ocp-release@shaXXXXX

      Expected results:

          Command generates an ISO used to add the new worker nodes

      Additional info:

          When creating the initial agent ISO using "openshift-install agent create image" command, we can see in the output that a sub command is run, "oc adm release extract". When the install-config.yaml contains the ImageContentSourcePolicy section, or ImageDigestMirrorSet section, a flag is added to "oc adm release extract --icsp or idms" which contains the mappings from quay.io to the private registry.
      
          The oc command does not have a top level icsp or idms flag. The oc adm node-image command needs to have a flag for icsp or idms such that it is able to understand that instead of pulling the release image from quay.io it should pull the image from the private registry.
      
          Without this flag, the oc command has no way to know that it should be pulling container images from a private registry.

              bfournie@redhat.com Robert Fournier
              openshift-crt-jira-prow OpenShift Prow Bot
              None
              None
              Manoj Hans Manoj Hans
              None
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: