Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-27234

Add oc-mirror v2 plugin's option to mirror the signature

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • documentation
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • ?
    • rhos-docs
    • None
    • Critical

      Doc Link: https://docs.redhat.com/en/documentation/red_hat_openstack_services_on_openshift/18.0/html/deploying_red_hat_openstack_services_on_openshift_in_a_disconnected_environment/proc_prepare-images-and-operator-mirror_disconnected-rhoso

      The current procedure doesn't mention the signature preservation.
      If oc-mirror v2 drop the signature, EDPM nodes deployment will fail at pulling container image on EDPM node because the signature verification failed due to the default configuration in /etc/containers/policy.json.

      This caused by oc-mirror v2 plugin which is earlier than OCP4.19 doesn't support to preserve the signature.

      The latest oc-mirror plugin itself is supported regardless of which OCP version is used in the deployment.

      So, we need to add the following sentences.
      1. Use the latest oc-mirror v2 plugin according to the OCP guide, https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/disconnected_environments/about-installing-oc-mirror-v2#oc-mirror-v2-support_about-installing-oc-mirror-v2
      2. If your using oc-mirror v2 plugin is between OCP4.19 and OCP4.20, add `--remove-signature=false` for mirror the image.
      refer to https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/disconnected_environments/about-installing-oc-mirror-v2#oc-mirror-signature-mirroring_about-installing-oc-mirror-v2
      3. If your using oc-mirror v2 plugin is 4.21 and later, the plugin mirrors signatures for all images.

              ctomasko Catherine Tomasko
              rhn-support-knoha Keigo Noha
              rhos-docs
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: