When installing a cluster in existing VPC extending worker nodes in AWS Local Zones subnets, the local registry is not working correctly, falling into errors when pulling internal images.

4.12.z

Always

1. Install a cluster following the documentation
2. Login to the node running in Local Zone
3. Try to pull any image from internal registry

$ NODE_NAME=$(oc get nodes -l node-role.kubernetes.io/edge='' -o jsonpath={.items[0].metadata.name})
$ KPASS=$(cat auth/kubeadmin-password)
$ API_INT=$(oc get infrastructures cluster -o jsonpath={.status.apiServerInternalURI})

$ oc debug node/${NODE_NAME} --  chroot /host /bin/bash -c "\
$ oc login --insecure-skip-tls-verify -u kubeadmin -p ${KPASS} ${API_INT}; \
podman login -u kubeadmin -p \$(oc whoami -t) image-registry.openshift-image-registry.svc:5000; \
podman pull image-registry.openshift-image-registry.svc:5000/openshift/tests"

(...)
Error: authenticating creds for "image-registry.openshift-image-registry.svc:5000": pinging container registry image-registry.openshift-image-registry.svc:5000: Get "https://image-registry.openshift-image-registry.svc:5000/v2/": net/http: TLS handshake timeout
Trying to pull image-registry.openshift-image-registry.svc:5000/openshift/tests:latest...
time="2023-01-30T16:10:29Z" level=warning msg="Failed, retrying in 1s ... (1/3). Error: initializing source docker://image-registry.openshift-image-registry.svc:5000/openshift/tests:latest: pinging container registry image-registry.openshift-image-registry.svc:5000: Get \"https://image-registry.openshift-image-registry.svc:5000/v2/\": net/http: TLS handshake timeout"

Image pulled

Steps to fix: Add a step on the procedure withing the section "Creating the Kubernetes manifest files" to add the CNO manifest to change it on Install time (documnetation reference[3]). Steps:

. Set the MTU size to 1200
+
[source,terminal]
----
$ cat <<EOF > manifests/cluster-network-03-config.yml
apiVersion: operator.openshift.io/v1
kind: Network
metadata:
  name: cluster
spec:
  defaultNetwork:
    ovnKubernetesConfig:
      mtu: 1200
EOF
----