-
Bug
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
False
-
-
False
-
?
-
None
-
-
-
-
Moderate
To Reproduce Steps to reproduce the behavior:
- Create packages and images mirror for air gapped environment.
- Create Control plane as doc.
- Try to apply OpenStackDataPlaneDeployment using insecure mirror (edpm_container_registry_insecure_registries).
- See error below at task "Perform container registry login".
"Error: authenticating creds for \"example.com:8888\": pinging container registry example.com:8888: Get \"https://example.com:8888/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority"
Expected behavior
- Dataplane created
- Clear instructions on how to use insecure registry/mirror.
Device Info (please complete the following information):
- OS Version:RHEL9.4
- RHOSO 18.0.6-20250403.1 (Operator Version: 1.0.8)
- OpenShift Cluster Version: 4.16.21
Bug impact
- Customer is unable to deploy the disconnected environment.
Known workaround
- Tried to set parameters below without success.
- edpm_container_registry_insecure_registries
- edpm_container_registry_login
- edpm_podman_disconnected_ocp
- edpm_podman_registries
Additional context
- Checked the file "/etc/containers/registries.conf" of compute node and it contains the mirror but not the insecure parameter.
- Some OCP services contains the same error about the registry certificate.