-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
None
-
False
-
-
None
-
None
-
None
-
None
-
OCP Kueue Sprint 285
-
None
-
None
-
None
As discussed on these threads here and here. oc-mirror is presenting a problem to sign images.
The failure is triggered by the signature mirroring feature being enabled by default starting in 4.21.
When running in certain CI/CD environments (like Prow) or restricted containers, oc-mirror attempts to access the registries.d configuration path to handle sigstore signatures. This results in a fatal error because the tool cannot resolve the current UID to a username (e.g., in OpenShift pods using arbitrary UIDs).
The error seeing on Prow Jobs is:
---///tmp/mirror-operators docker://ci-op-hgkyvqn7-fbdab.mirror-registry.XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:5000 --log-level=info --retry-times=5 --src-tls-verify=false --dest-tls-verify=false2026/02/27 04:52:33 [INFO] : 👋 Hello, welcome to oc-mirror2026/02/27 04:52:33 [INFO] : ⚙️ setting up the environment for you...2026/02/27 04:52:33 [INFO] : ⚙️ environment version: 4.21.0-202602120922.p2.g84f4d75.assembly.stream.el9-84f4d752026/02/27 04:52:33 [INFO] : 🔀 workflow mode: mirrorToMirror 2026/02/27 04:52:33 [INFO] : Verified we can authenticate against registry "ci-op-hgkyvqn7-fbdab.mirror-registry.XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:5000"2026/02/27 04:52:33 [INFO] : 🕵 going to discover the necessary images...2026/02/27 04:52:33 [INFO] : 🔍 collecting release images...2026/02/27 04:52:33 [INFO] : 🔍 collecting operator images...2026/02/27 04:52:33 [INFO] : Collecting catalog registry.redhat.io/redhat/redhat-operator-index:v4.202026/02/27 04:53:52 [INFO] : Collected catalog registry.redhat.io/redhat/redhat-operator-index:v4.202026/02/27 04:53:52 [INFO] : 🔍 collecting additional images...2026/02/27 04:53:52 [INFO] : 🔍 collecting helm images...2026/02/27 04:53:52 [INFO] : mirror time : 1m18.410544985s2026/02/27 04:53:52 [INFO] : 👋 Goodbye, thank you for using oc-mirror2026/02/27 04:53:52 [ERROR] : [Executor] error getting the default registryd config path : unable to determine the current user : user: unknown userid 1001710000 {"component":"entrypoint","error":"wrapped process failed: exit status 1","file":"sigs.k8s.io/prow/pkg/entrypoint/run.go:84","func":"sigs.k8s.io/prow/pkg/entrypoint.Options.internalRun","level":"error","msg":"Error executing test process","severity":"error","time":"2026-02-27T04:53:52Z"}error: failed to execute wrapped command: exit status 1
Here's an example of Prow Job execution.
- relates to
-
OCPKUEUE-510 Kueue 1.3 Release Testing
-
- In Progress
-
- links to