-
Bug
-
Resolution: Unresolved
-
Normal
-
None
-
4.16
-
None
-
Quality / Stability / Reliability
-
False
-
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Description of problem:
naming and the actual interpretation appear to be misleading for images and image-tags in limitrange
Version-Release number of selected component (if applicable):
4.x
How reproducible:
100 %
Steps to Reproduce:
1- create a limitrange using below yaml
apiVersion: v1 kind: LimitRange metadata: name: openshift-resource-limits spec: limits: - type: openshift.io/ImageStream max: openshift.io/image-tags: 1 openshift.io/images: 2 oc describe limitrange Name: openshift-resource-limits Namespace: amuhamme Type Resource Min Max Default Request Default Limit Max Limit/Request Ratio ---- -------- --- --- --------------- ------------- ----------------------- openshift.io/ImageStream openshift.io/image-tags - 1 - - - openshift.io/ImageStream openshift.io/images - 2 - - -
2- As per above limitrange conf, it should allow maximum one tag's and 2 images per tag
3- Try to create more than one tag and able to create more than one tag
oc get is
NAME IMAGE REPOSITORY TAGS UPDATED
test image-registry.openshift-image-registry.svc:5000/amuhamme/test new,latest 6 seconds ago
test1 image-registry.openshift-image-registry.svc:5000/amuhamme/test1
3- if i create one more tag (3rd one) its failing with permission denied.
[root@worker-0 ~]# podman push image-registry.openshift-image-registry.svc:5000/amuhamme/test:hi Getting image source signatures Copying blob b64aaade7c59 skipped: already exists Copying blob dc9835b180d8 skipped: already exists Copying blob ae0badd53767 skipped: already exists Copying blob 210e6a098c9f skipped: already exists Copying config a250ef31d2 done | Writing manifest to image destination Error: writing manifest: uploading manifest hi to image-registry.openshift-image-registry.svc:5000/amuhamme/test: denied
4- try to push another image (second one) to the tag and see its failing
[root@worker-0 ~]# podman push image-registry.openshift-image-registry.svc:5000/amuhamme/test:latest Getting image source signatures Copying blob 210e6a098c9f skipped: already exists Copying blob ae0badd53767 skipped: already exists Copying blob c91bbdb1dcb2 done | Copying blob dc9835b180d8 skipped: already exists Copying config 6cd179e2e2 done | Writing manifest to image destination Error: writing manifest: uploading manifest latest to image-registry.openshift-image-registry.svc:5000/amuhamme/test: denied
It seems that "image-tags" are being treated as the total number of images within a tag, while "images" are being counted as the number of tags per imagestream. This naming and the actual interpretation appear to be misleading.
Actual results:
name and actual considerations are misleading
Expected results:
name and actual considerations should not misleading
Additional info:
