Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-19681

[RHOSO] Disconnected Dataplane creation fail with insecure mirror

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • edpm-ansible
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • ?
    • None
    • Moderate

      To Reproduce Steps to reproduce the behavior:

      1. Create packages and images mirror for air gapped environment.
      2. Create Control plane as doc.
      3. Try to apply OpenStackDataPlaneDeployment using insecure mirror (edpm_container_registry_insecure_registries).
      4. See error below at task "Perform container registry login".

       "Error: authenticating creds for \"example.com:8888\": pinging container registry example.com:8888: Get \"https://example.com:8888/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority"

      Expected behavior

      • Dataplane created
      • Clear instructions on how to use insecure registry/mirror.

      Device Info (please complete the following information):

      • OS Version:RHEL9.4
      • RHOSO 18.0.6-20250403.1 (Operator Version: 1.0.8)
      • OpenShift Cluster Version: 4.16.21

      Bug impact

      • Customer is unable to deploy the  disconnected environment.

      Known workaround

      • Tried to set parameters below without success.
        • edpm_container_registry_insecure_registries
        • edpm_container_registry_login
        • edpm_podman_disconnected_ocp
        • edpm_podman_registries

      Additional context

      • Checked the file "/etc/containers/registries.conf" of compute node and it contains the mirror but not the insecure parameter.
      • Some OCP services contains the same error about the registry certificate.

              Unassigned Unassigned
              rh-ee-cgussobo Conrado Gusso Bozza
              rhos-dfg-df
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: