-
Bug
-
Resolution: Unresolved
-
Major
-
4.20.0
-
Quality / Stability / Reliability
-
False
-
-
None
-
Critical
-
Yes
-
None
-
Rejected
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Description of problem:
I0826 09:43:19.488414 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o=jsonpath-as-json={.status}' I0826 09:43:20.530575 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o=jsonpath-as-json={.status}], the returned resource:[ { "conditions": [ { "lastTransitionTime": "2025-08-26T01:41:48Z", "message": "source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get \"https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority", "observedGeneration": 1, "reason": "Retrying", "status": "True", "type": "Progressing" } ] } ]
Version-Release number of selected component (if applicable):
Cluster version is 4.20.0-0.nightly-2025-08-18-192426
How reproducible:
always
Steps to Reproduce:
Run the corresponding automation test case, like
jiazha-mac:openshift-tests-private jiazha$ ./bin/extended-platform-tests run all --dry-run|grep "80458" |./bin/extended-platform-tests run -f - ... ...
Or you can refer to https://issues.redhat.com/browse/OCPBUGS-48795 for manual steps.
Actual results:
Fail to create the ClusterCatalog, which uses a custom cluster internal registry.
I0826 09:43:19.488414 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o=jsonpath-as-json={.status}' I0826 09:43:20.530575 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o=jsonpath-as-json={.status}], the returned resource:[ { "conditions": [ { "lastTransitionTime": "2025-08-26T01:41:48Z", "message": "source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get \"https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority", "observedGeneration": 1, "reason": "Retrying", "status": "True", "type": "Progressing" } ] } ]
Expected results:
OLMv1 can successfully create a ClusterCatalog that uses the cluster's internal registry.
Additional info:
• [FAILED] [133.190 seconds] [sig-operators] OLM v1 oprun should [It] Author:jiazha-LEVEL0-ROSA-OSD_CCS-ARO-NonHyperShiftHOST-ConnectedOnly-Critical-80458-clustercatalog get x509 error since it cannot get the custom CA automatically [Serial] /Users/jiazha/goproject/openshift-tests-private/test/extended/operators/olmv1_oprun.go:197 Timeline >> STEP: Creating a kubernetes client @ 08/26/25 09:41:19.942 STEP: 1) create a random namespace @ 08/26/25 09:41:20.783 I0826 09:41:20.783981 25459 clusters.go:324] it is not external oidc cluster I0826 09:41:23.061566 25459 client.go:223] configPath is now "/var/folders/5n/w9ysf4w93jnfy7k19xxct31c0000gn/T/configfile1695933825" I0826 09:41:23.061651 25459 client.go:503] The user is now "e2e-test-default-hwxns-user" I0826 09:41:23.061663 25459 client.go:506] Creating project "e2e-test-default-hwxns" I0826 09:41:23.427883 25459 client.go:515] Waiting on permissions in project "e2e-test-default-hwxns" ... I0826 09:41:24.536426 25459 client.go:576] Waiting for ServiceAccount "default" to be provisioned... I0826 09:41:24.914685 25459 client.go:576] Waiting for ServiceAccount "builder" to be provisioned... I0826 09:41:25.302530 25459 client.go:576] Waiting for ServiceAccount "deployer" to be provisioned... I0826 09:41:25.686607 25459 client.go:586] Waiting for RoleBinding "system:image-builders" to be provisioned... I0826 09:41:26.241534 25459 client.go:586] Waiting for RoleBinding "system:deployers" to be provisioned... I0826 09:41:26.799142 25459 client.go:586] Waiting for RoleBinding "system:image-pullers" to be provisioned... I0826 09:41:27.345078 25459 client.go:617] Project "e2e-test-default-hwxns" has been fully provisioned. STEP: 2) create an image registry @ 08/26/25 09:41:27.345 I0826 09:41:27.345396 25459 client.go:1013] Running 'oc --kubeconfig=/var/folders/5n/w9ysf4w93jnfy7k19xxct31c0000gn/T/configfile1695933825 new-app --image quay.io/openshifttest/registry@sha256:1106aedc1b2e386520bc2fb797d9a7af47d651db31d8e7ab472f2352da37d1b3 -n e2e-test-default-hwxns REGISTRY_STORAGE_DELETE_ENABLED=true --import-mode=PreserveOriginal' --> Found container image 1106aed (2 seconds old) from quay.io for "quay.io/openshifttest/registry@sha256:1106aedc1b2e386520bc2fb797d9a7af47d651db31d8e7ab472f2352da37d1b3" * An image stream tag will be created as "registry:latest" that will track this image --> Creating resources ... imagestream.image.openshift.io "registry" created deployment.apps "registry" created service "registry" created --> Success Application is not exposed. You can expose services to the outside world by executing one or more of the commands below: 'oc expose service/registry' Run 'oc status' to view your app. I0826 09:41:35.597071 25459 olmv1_oprun.go:209] Get registry pods: [registry-6bd65cf8f-x7w7v] I0826 09:41:35.597628 25459 client.go:1013] Running 'oc --kubeconfig=/var/folders/5n/w9ysf4w93jnfy7k19xxct31c0000gn/T/configfile1695933825 create route edge my-route --service=registry -n e2e-test-default-hwxns' I0826 09:41:36.863311 25459 client.go:1013] Running 'oc --kubeconfig=/var/folders/5n/w9ysf4w93jnfy7k19xxct31c0000gn/T/configfile1695933825 get route my-route -o=jsonpath={.spec.host} -n e2e-test-default-hwxns' I0826 09:41:37.867026 25459 client.go:1013] Running 'oc --kubeconfig=/var/folders/5n/w9ysf4w93jnfy7k19xxct31c0000gn/T/configfile1695933825 set volume deploy registry --add -t pvc --claim-size=30G -m /var/lib/registry --overwrite -n e2e-test-default-hwxns' I0826 09:41:39.451816 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig extract secret/router-ca -n openshift-ingress-operator --to=/tmp --confirm' I0826 09:41:40.501806 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig create -n openshift-config configmap trusted-ca-80458 --from-file=my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com=/tmp/tls.crt' I0826 09:41:41.436380 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig patch image.config.openshift.io/cluster -p {"spec": {"additionalTrustedCA": {"name": "trusted-ca-80458"}}} --type=merge' image.config.openshift.io/cluster patched STEP: 3) create a ClusterCatalog @ 08/26/25 09:41:43.243 I0826 09:41:46.255591 25459 client.go:1038] showInfo is true I0826 09:41:46.255725 25459 client.go:1040] Running 'oc --namespace=e2e-test-default-hwxns --kubeconfig=/Users/jiazha/20-kubeconfig process --ignore-unknown-parameters=true -f /var/folders/5n/w9ysf4w93jnfy7k19xxct31c0000gn/T/fixture-testdata-dir2773669930/test/extended/testdata/olm/v1/clustercatalog.yaml -p NAME=clustercatalog-80458 IMAGE=my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/redhat/redhat-operator-index:v4.17' I0826 09:41:47.198916 25459 template.go:76] the file of resource is /tmp/e2e-test-default-hwxns-bdn8f5fpconfig.json.stdout I0826 09:41:47.199272 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig apply -f /tmp/e2e-test-default-hwxns-bdn8f5fpconfig.json.stdout' clustercatalog.olm.operatorframework.io/clustercatalog-80458 created I0826 09:41:48.486474 25459 catalog.go:112] ========= check clustercatalog clustercatalog-80458 Progressing message expect is manifest unknown ========= I0826 09:41:53.488489 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:41:54.448705 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:41:54.448853 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:41:58.488716 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:41:59.523515 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:41:59.523688 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:03.488820 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:04.475346 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:04.475484 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:08.488678 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:09.444271 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:09.444438 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:13.488116 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:14.418580 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:14.418728 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:18.488673 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:19.476492 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:19.476611 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:23.488827 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:24.441185 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:24.441326 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:28.488863 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:29.422269 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:29.422414 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:33.488684 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:34.432225 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:34.432361 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:38.488855 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:39.444152 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:39.444300 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:43.488486 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:44.441197 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:44.441415 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:48.488895 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:49.428081 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:49.428182 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:53.488728 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:54.436060 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:54.436276 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:42:58.488517 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:42:59.530934 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:42:59.531086 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:43:03.488733 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:43:04.438661 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:43:04.438755 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:43:08.488873 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:43:09.460769 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:43:09.460895 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:43:13.488251 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:43:14.438366 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:43:14.438494 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:43:18.488631 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}' I0826 09:43:19.487973 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o jsonpath={.status.conditions[?(@.type=="Progressing")].message}], the returned resource:source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority I0826 09:43:19.488087 25459 catalog.go:121] got is source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get "https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority, not manifest unknown, and try next I0826 09:43:19.488414 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458 -o=jsonpath-as-json={.status}' I0826 09:43:20.530575 25459 resource_op.go:186] $oc get [clustercatalog clustercatalog-80458 -o=jsonpath-as-json={.status}], the returned resource:[ { "conditions": [ { "lastTransitionTime": "2025-08-26T01:41:48Z", "message": "source catalog content: error creating image source: pinging container registry my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com: Get \"https://my-route-e2e-test-default-hwxns.apps.wduan-826a.qe.devcluster.openshift.com/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority", "observedGeneration": 1, "reason": "Retrying", "status": "True", "type": "Progressing" } ] } ] I0826 09:43:20.531493 25459 catalog.go:177] =========Delete clustercatalog clustercatalog-80458========= I0826 09:43:20.531536 25459 catalog.go:172] =========DeleteWithoutCheck clustercatalog clustercatalog-80458========= I0826 09:43:20.531784 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig delete clustercatalog clustercatalog-80458' I0826 09:43:25.876735 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458' I0826 09:43:26.840322 25459 client.go:1022] Error running /usr/local/bin/oc --kubeconfig=/Users/jiazha/20-kubeconfig get clustercatalog clustercatalog-80458: Error from server (NotFound): clustercatalogs.olm.operatorframework.io "clustercatalog-80458" not found I0826 09:43:26.840465 25459 resource_op.go:245] the resource is delete successfully I0826 09:43:26.840757 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig patch image.config.openshift.io/cluster -p {"spec": {"additionalTrustedCA": {"name": ""}}} --type=merge' image.config.openshift.io/cluster patched I0826 09:43:28.711159 25459 client.go:1013] Running 'oc --kubeconfig=/Users/jiazha/20-kubeconfig delete -n openshift-config configmap trusted-ca-80458' configmap "trusted-ca-80458" deleted [FAILED] in [It] - /Users/jiazha/goproject/openshift-tests-private/test/extended/util/assert.go:30 @ 08/26/25 09:43:29.957 STEP: Collecting events from namespace "e2e-test-default-hwxns". @ 08/26/25 09:43:29.957 STEP: Found 35 events. @ 08/26/25 09:43:31.08 I0826 09:43:31.080239 25459 dump.go:53] At 0001-01-01 00:00:00 +0000 UTC - event for registry-6bd65cf8f-x7w7v: { } Scheduled: Successfully assigned e2e-test-default-hwxns/registry-6bd65cf8f-x7w7v to ip-10-0-77-185.us-east-2.compute.internal I0826 09:43:31.080300 25459 dump.go:53] At 0001-01-01 00:00:00 +0000 UTC - event for registry-7ccc95d6dc-cqw72: { } Scheduled: Successfully assigned e2e-test-default-hwxns/registry-7ccc95d6dc-cqw72 to ip-10-0-77-185.us-east-2.compute.internal I0826 09:43:31.080318 25459 dump.go:53] At 2025-08-26 09:41:31 +0800 CST - event for registry: {deployment-controller } ScalingReplicaSet: Scaled up replica set registry-569c6fb98 from 0 to 1 I0826 09:43:31.080331 25459 dump.go:53] At 2025-08-26 09:41:31 +0800 CST - event for registry-569c6fb98: {replicaset-controller } FailedCreate: Error creating: Pod "registry-569c6fb98-d5wx9" is invalid: spec.containers[0].image: Invalid value: " ": must not have leading or trailing whitespace I0826 09:43:31.080342 25459 dump.go:53] At 2025-08-26 09:41:31 +0800 CST - event for registry-569c6fb98: {replicaset-controller } FailedCreate: Error creating: Pod "registry-569c6fb98-l2skl" is invalid: spec.containers[0].image: Invalid value: " ": must not have leading or trailing whitespace I0826 09:43:31.080358 25459 dump.go:53] At 2025-08-26 09:41:31 +0800 CST - event for registry-569c6fb98: {replicaset-controller } FailedCreate: Error creating: Pod "registry-569c6fb98-grpnr" is invalid: spec.containers[0].image: Invalid value: " ": must not have leading or trailing whitespace I0826 09:43:31.080369 25459 dump.go:53] At 2025-08-26 09:41:31 +0800 CST - event for registry-569c6fb98: {replicaset-controller } FailedCreate: Error creating: Pod "registry-569c6fb98-ff82s" is invalid: spec.containers[0].image: Invalid value: " ": must not have leading or trailing whitespace I0826 09:43:31.080379 25459 dump.go:53] At 2025-08-26 09:41:31 +0800 CST - event for registry-569c6fb98: {replicaset-controller } FailedCreate: Error creating: Pod "registry-569c6fb98-7mt7r" is invalid: spec.containers[0].image: Invalid value: " ": must not have leading or trailing whitespace I0826 09:43:31.080452 25459 dump.go:53] At 2025-08-26 09:41:31 +0800 CST - event for registry-569c6fb98: {replicaset-controller } FailedCreate: Error creating: Pod "registry-569c6fb98-4rv7m" is invalid: spec.containers[0].image: Invalid value: " ": must not have leading or trailing whitespace I0826 09:43:31.080471 25459 dump.go:53] At 2025-08-26 09:41:31 +0800 CST - event for registry-569c6fb98: {replicaset-controller } FailedCreate: Error creating: Pod "registry-569c6fb98-lzpx8" is invalid: spec.containers[0].image: Invalid value: " ": must not have leading or trailing whitespace I0826 09:43:31.080494 25459 dump.go:53] At 2025-08-26 09:41:31 +0800 CST - event for registry-569c6fb98: {replicaset-controller } FailedCreate: Error creating: Pod "registry-569c6fb98-zfkfb" is invalid: spec.containers[0].image: Invalid value: " ": must not have leading or trailing whitespace I0826 09:43:31.080512 25459 dump.go:53] At 2025-08-26 09:41:32 +0800 CST - event for registry: {deployment-controller } ScalingReplicaSet: Scaled up replica set registry-6bd65cf8f from 0 to 1 I0826 09:43:31.080525 25459 dump.go:53] At 2025-08-26 09:41:32 +0800 CST - event for registry-569c6fb98: {replicaset-controller } FailedCreate: Error creating: Pod "registry-569c6fb98-nskj9" is invalid: spec.containers[0].image: Invalid value: " ": must not have leading or trailing whitespace I0826 09:43:31.080539 25459 dump.go:53] At 2025-08-26 09:41:32 +0800 CST - event for registry-6bd65cf8f: {replicaset-controller } SuccessfulCreate: Created pod: registry-6bd65cf8f-x7w7v I0826 09:43:31.080550 25459 dump.go:53] At 2025-08-26 09:41:32 +0800 CST - event for registry-6bd65cf8f-x7w7v: {kubelet ip-10-0-77-185.us-east-2.compute.internal} Pulling: Pulling image "quay.io/openshifttest/registry@sha256:1106aedc1b2e386520bc2fb797d9a7af47d651db31d8e7ab472f2352da37d1b3" I0826 09:43:31.080563 25459 dump.go:53] At 2025-08-26 09:41:32 +0800 CST - event for registry-6bd65cf8f-x7w7v: {multus } AddedInterface: Add eth0 [10.129.2.18/23] from ovn-kubernetes I0826 09:43:31.080577 25459 dump.go:53] At 2025-08-26 09:41:33 +0800 CST - event for registry-569c6fb98: {replicaset-controller } FailedCreate: (combined from similar events): Error creating: Pod "registry-569c6fb98-nslsw" is invalid: spec.containers[0].image: Invalid value: " ": must not have leading or trailing whitespace I0826 09:43:31.080589 25459 dump.go:53] At 2025-08-26 09:41:33 +0800 CST - event for registry-6bd65cf8f-x7w7v: {kubelet ip-10-0-77-185.us-east-2.compute.internal} Pulled: Successfully pulled image "quay.io/openshifttest/registry@sha256:1106aedc1b2e386520bc2fb797d9a7af47d651db31d8e7ab472f2352da37d1b3" in 1.365s (1.366s including waiting). Image size: 24647049 bytes. I0826 09:43:31.080598 25459 dump.go:53] At 2025-08-26 09:41:34 +0800 CST - event for registry: {deployment-controller } ScalingReplicaSet: Scaled down replica set registry-569c6fb98 from 1 to 0 I0826 09:43:31.080609 25459 dump.go:53] At 2025-08-26 09:41:34 +0800 CST - event for registry-6bd65cf8f-x7w7v: {kubelet ip-10-0-77-185.us-east-2.compute.internal} Created: Created container: registry I0826 09:43:31.080619 25459 dump.go:53] At 2025-08-26 09:41:34 +0800 CST - event for registry-6bd65cf8f-x7w7v: {kubelet ip-10-0-77-185.us-east-2.compute.internal} Started: Started container registry I0826 09:43:31.080664 25459 dump.go:53] At 2025-08-26 09:41:39 +0800 CST - event for pvc-9dfmm: {persistentvolume-controller } WaitForFirstConsumer: waiting for first consumer to be created before binding I0826 09:43:31.080690 25459 dump.go:53] At 2025-08-26 09:41:39 +0800 CST - event for pvc-9dfmm: {ebs.csi.aws.com_aws-ebs-csi-driver-controller-59dc765c65-lfmb7_bdb0f9b1-b807-477b-9f27-24317512ea2b } Provisioning: External provisioner is provisioning volume for claim "e2e-test-default-hwxns/pvc-9dfmm" I0826 09:43:31.080701 25459 dump.go:53] At 2025-08-26 09:41:39 +0800 CST - event for pvc-9dfmm: {persistentvolume-controller } ExternalProvisioning: Waiting for a volume to be created either by the external provisioner 'ebs.csi.aws.com' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered. I0826 09:43:31.080713 25459 dump.go:53] At 2025-08-26 09:41:39 +0800 CST - event for registry: {deployment-controller } ScalingReplicaSet: Scaled up replica set registry-7ccc95d6dc from 0 to 1 I0826 09:43:31.080724 25459 dump.go:53] At 2025-08-26 09:41:39 +0800 CST - event for registry-7ccc95d6dc: {replicaset-controller } SuccessfulCreate: Created pod: registry-7ccc95d6dc-cqw72 I0826 09:43:31.080735 25459 dump.go:53] At 2025-08-26 09:41:41 +0800 CST - event for pvc-9dfmm: {ebs.csi.aws.com_aws-ebs-csi-driver-controller-59dc765c65-lfmb7_bdb0f9b1-b807-477b-9f27-24317512ea2b } ProvisioningSucceeded: Successfully provisioned volume pvc-334610f5-e81c-4a61-96f6-47d8fed6ae68 I0826 09:43:31.080748 25459 dump.go:53] At 2025-08-26 09:41:44 +0800 CST - event for registry-7ccc95d6dc-cqw72: {attachdetach-controller } SuccessfulAttachVolume: AttachVolume.Attach succeeded for volume "pvc-334610f5-e81c-4a61-96f6-47d8fed6ae68" I0826 09:43:31.080766 25459 dump.go:53] At 2025-08-26 09:41:45 +0800 CST - event for registry-7ccc95d6dc-cqw72: {multus } AddedInterface: Add eth0 [10.129.2.19/23] from ovn-kubernetes I0826 09:43:31.080777 25459 dump.go:53] At 2025-08-26 09:41:45 +0800 CST - event for registry-7ccc95d6dc-cqw72: {kubelet ip-10-0-77-185.us-east-2.compute.internal} Started: Started container registry I0826 09:43:31.080788 25459 dump.go:53] At 2025-08-26 09:41:45 +0800 CST - event for registry-7ccc95d6dc-cqw72: {kubelet ip-10-0-77-185.us-east-2.compute.internal} Created: Created container: registry I0826 09:43:31.080822 25459 dump.go:53] At 2025-08-26 09:41:45 +0800 CST - event for registry-7ccc95d6dc-cqw72: {kubelet ip-10-0-77-185.us-east-2.compute.internal} Pulled: Container image "quay.io/openshifttest/registry@sha256:1106aedc1b2e386520bc2fb797d9a7af47d651db31d8e7ab472f2352da37d1b3" already present on machine I0826 09:43:31.080845 25459 dump.go:53] At 2025-08-26 09:41:46 +0800 CST - event for registry: {deployment-controller } ScalingReplicaSet: Scaled down replica set registry-6bd65cf8f from 1 to 0 I0826 09:43:31.080859 25459 dump.go:53] At 2025-08-26 09:41:46 +0800 CST - event for registry-6bd65cf8f: {replicaset-controller } SuccessfulDelete: Deleted pod: registry-6bd65cf8f-x7w7v I0826 09:43:31.080871 25459 dump.go:53] At 2025-08-26 09:41:46 +0800 CST - event for registry-6bd65cf8f-x7w7v: {kubelet ip-10-0-77-185.us-east-2.compute.internal} Killing: Stopping container registry I0826 09:43:31.362007 25459 resource.go:168] POD NODE PHASE GRACE CONDITIONS I0826 09:43:31.362220 25459 resource.go:175] registry-7ccc95d6dc-cqw72 ip-10-0-77-185.us-east-2.compute.internal Running [{PodReadyToStartContainers True 0001-01-01 00:00:00 +0000 UTC 2025-08-26 09:41:46 +0800 CST } {Initialized True 0001-01-01 00:00:00 +0000 UTC 2025-08-26 09:41:42 +0800 CST } {Ready True 0001-01-01 00:00:00 +0000 UTC 2025-08-26 09:41:46 +0800 CST } {ContainersReady True 0001-01-01 00:00:00 +0000 UTC 2025-08-26 09:41:46 +0800 CST } {PodScheduled True 0001-01-01 00:00:00 +0000 UTC 2025-08-26 09:41:42 +0800 CST }] I0826 09:43:31.362236 25459 resource.go:178] I0826 09:43:31.923360 25459 dump.go:81] skipping dumping cluster info - cluster too large I0826 09:43:32.208608 25459 client.go:703] Deleted {user.openshift.io/v1, Resource=users e2e-test-default-hwxns-user}, err: <nil> I0826 09:43:32.495592 25459 client.go:703] Deleted {oauth.openshift.io/v1, Resource=oauthclients e2e-client-e2e-test-default-hwxns}, err: <nil> I0826 09:43:32.826502 25459 client.go:703] Deleted {oauth.openshift.io/v1, Resource=oauthaccesstokens sha256~7Qq_1WLgO41L6kJF8tu_MwI13fO_tDEceuHnYDZ5uwQ}, err: <nil> STEP: Destroying namespace "e2e-test-default-hwxns" for this suite. @ 08/26/25 09:43:32.828 << Timeline [FAILED] Unexpected error: <*errors.errorString | 0x14001a5cf80>: case: [sig-operators] OLM v1 oprun should Author:jiazha-LEVEL0-ROSA-OSD_CCS-ARO-NonHyperShiftHOST-ConnectedOnly-Critical-80458-clustercatalog get x509 error since it cannot get the custom CA automatically [Serial] error: clustercatalog Progressing expected is not manifest unknown in 90 seconds { s: "case: [sig-operators] OLM v1 oprun should Author:jiazha-LEVEL0-ROSA-OSD_CCS-ARO-NonHyperShiftHOST-ConnectedOnly-Critical-80458-clustercatalog get x509 error since it cannot get the custom CA automatically [Serial]\nerror: clustercatalog Progressing expected is not manifest unknown in 90 seconds", } occurred In [It] at: /Users/jiazha/goproject/openshift-tests-private/test/extended/util/assert.go:30 @ 08/26/25 09:43:29.957 ------------------------------ Summarizing 1 Failure: [FAIL] [sig-operators] OLM v1 oprun should [It] Author:jiazha-LEVEL0-ROSA-OSD_CCS-ARO-NonHyperShiftHOST-ConnectedOnly-Critical-80458-clustercatalog get x509 error since it cannot get the custom CA automatically [Serial] /Users/jiazha/goproject/openshift-tests-private/test/extended/util/assert.go:30 Ran 1 of 1 Specs in 133.192 seconds FAIL! -- 0 Passed | 1 Failed | 0 Pending | 0 Skipped fail [/Users/jiazha/goproject/openshift-tests-private/test/extended/util/assert.go:30]: Unexpected error: <*errors.errorString | 0x14001a5cf80>: case: [sig-operators] OLM v1 oprun should Author:jiazha-LEVEL0-ROSA-OSD_CCS-ARO-NonHyperShiftHOST-ConnectedOnly-Critical-80458-clustercatalog get x509 error since it cannot get the custom CA automatically [Serial] error: clustercatalog Progressing expected is not manifest unknown in 90 seconds { s: "case: [sig-operators] OLM v1 oprun should Author:jiazha-LEVEL0-ROSA-OSD_CCS-ARO-NonHyperShiftHOST-ConnectedOnly-Critical-80458-clustercatalog get x509 error since it cannot get the custom CA automatically [Serial]\nerror: clustercatalog Progressing expected is not manifest unknown in 90 seconds", } occurred failed: (2m20s) 2025-08-26T01:43:33 "[sig-operators] OLM v1 oprun should Author:jiazha-LEVEL0-ROSA-OSD_CCS-ARO-NonHyperShiftHOST-ConnectedOnly-Critical-80458-clustercatalog get x509 error since it cannot get the custom CA automatically [Serial]" Failing tests: [sig-operators] OLM v1 oprun should Author:jiazha-LEVEL0-ROSA-OSD_CCS-ARO-NonHyperShiftHOST-ConnectedOnly-Critical-80458-clustercatalog get x509 error since it cannot get the custom CA automatically [Serial] error: 1 fail, 0 pass, 0 skip (2m20s)
- blocks
-
OCPBUGS-61705 OLMv1 fail to use the custom CA: x509: certificate signed by unknown authority
-
- Verified
-
- is cloned by
-
OCPBUGS-61705 OLMv1 fail to use the custom CA: x509: certificate signed by unknown authority
-
- Verified
-
- is related to
-
OCPBUGS-48795 OLMv1 cannot get the custom CA automatically: x509 error
-
- Closed
-
-
OPRUN-4110 Add CertPoolWatcher support to catalogd and catalogd CAs
-
- Closed
-
- links to