Hi,

Note: Image 192.168.123.1:5000/redhat-operator-index:v4.6 was created with the following command, so ignore the references to codeready-workspaces in the below:
~~~
opm index prune -f registry.redhat.io/redhat/redhat-operator-index:v4.6 -p codeready-workspaces,jaeger-product,kiali-ossm -t 192.168.123.1:5000/redhat-operator-index:v4.6
~~~

A lot of the service mesh containers are using tags instead of SHA checksums. When creating an offline mirror of our operators, the following shows up:
~~~
[root@openshift-jumpserver-0 ~]# oc adm catalog mirror 192.168.123.1:5000/redhat-operator-index:v4.6 192.168.123.1:5000 -a ${REG_CREDS} --manifests-only
src image has index label for database path: /database/index.db
using database path mapping: /database/index.db:/tmp/227832334
wrote database to /tmp/227832334
using database at: /tmp/227832334/index.db
errors during mirroring. the full contents of the catalog may not have been mirrored: couldn't parse image path components for mirroring (registry.access.redhat.com/ubi8-minimal@sha256:9285da611437622492f9ef4229877efe302589f1401bbd4052e9bb261b3d4387), skipping mirror
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.6, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.7, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.10, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.11, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7:1.0.7, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.9, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.12.7, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7:1.12.7, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/codeready-workspaces/server-operator-rhel8:2.0, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7:1.0.8, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.12, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.8, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/distributed-tracing/jaeger-rhel7-operator:1.13.2, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.5, skip writing to ImageContentSourcePolicy
no digest mapping available for registry.redhat.io/codeready-workspaces/crw-2-rhel8-operator:2.2, skip writing to ImageContentSourcePolicy
wrote mirroring manifests to redhat-operator-index-manifests
~~~

This is really confusing to administrators, as they do not know if it is o.k. or not to see these "skip writing" messages.

From the above output, we can find the sqlite3 database: /tmp/227832334/index.db

And we can see that all images with a tag are skipped by the oc adm catalog mirror command:
~~~
[root@openshift-jumpserver-0 ~]# echo "select image from related_image" | sqlite3 -line /tmp/227832334/index.db | egrep -v '@sha256|^$'
image = registry.redhat.io/distributed-tracing/jaeger-rhel7-operator:1.13.2
image = registry.redhat.io/codeready-workspaces/server-operator-rhel8:2.0
image = registry.redhat.io/codeready-workspaces/crw-2-rhel8-operator:2.2
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.5
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.6
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.7
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7:1.0.7
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.8
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7:1.0.8
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.9
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.10
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.11
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.12
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.12.7
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7:1.12.7
~~~

We can see that the following containers do not have any version with a SHA digest:
~~~
[root@openshift-jumpserver-0 ~]# echo "select image from related_image" | sqlite3 -line /tmp/227832334/index.db | grep server-operator-rhel8
image = registry.redhat.io/codeready-workspaces/server-operator-rhel8:2.0
[root@openshift-jumpserver-0 ~]# echo "select image from related_image" | sqlite3 -line /tmp/227832334/index.db | grep jaeger-rhel7-operator
image = registry.redhat.io/distributed-tracing/jaeger-rhel7-operator:1.13.2
~~~

Whereas the kiali-rhel and kiali-rhel-operator and rw-2-rhel8-operator images have a mix of tags and SHA digests:
~~~
[root@openshift-jumpserver-0 ~]# echo "select image from related_image" | sqlite3 -line /tmp/227832334/index.db | grep crw-2-rhel8-operator
image = registry.redhat.io/codeready-workspaces/crw-2-rhel8-operator@sha256:e77a4e727f824c033b2e98b6dd862cc58ee9ef3e008f3a7244c59a337f71c65c
image = registry.redhat.io/codeready-workspaces/crw-2-rhel8-operator@sha256:02e8777fa295e6615bbd73f3d92911e7e7029b02cdf6346eba502aaeb8fe3de1
image = registry.redhat.io/codeready-workspaces/crw-2-rhel8-operator:2.2
image = registry.redhat.io/codeready-workspaces/crw-2-rhel8-operator@sha256:aae42a2298875c4dc271ef846f38cf96bd2f8ead8403aed2832065ae2a505084
image = registry.redhat.io/codeready-workspaces/crw-2-rhel8-operator@sha256:89763ddec38a5925a052fa7ea75fc5a0db39124cada1e2d33b6eba3e32e8a7c6
image = registry.redhat.io/codeready-workspaces/crw-2-rhel8-operator@sha256:467fd31388f82a26d196631bf6aa36343cd6e1e847ed20920fc07d5ba84dd255
image = registry.redhat.io/codeready-workspaces/crw-2-rhel8-operator@sha256:df78dac12257c42910cc98e3cf7cafab628012c19b3e4104f85f0567346f45d9
[root@openshift-jumpserver-0 ~]# echo "select image from related_image" | sqlite3 -line /tmp/227832334/index.db | grep kiali-rhel7
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.5
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.6
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.7
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7:1.0.7
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.8
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7:1.0.8
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.9
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.10
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.11
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.0.12
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator:1.12.7
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7:1.12.7
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:76667b3532df11a511b03c4efa165723cff48aa5fb2e56a2ceb693c02a6bce7a
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:e1fb3df10a7f7862e8549ad29e4dad97b22719896c10fe5109cbfb3b98f56900
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator@sha256:1ab53b817097f63182115bea016e55cb3773a0fcc0ec73fe53549d29edc8c172
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator@sha256:029df52ca4b14559c4cf1574161e9bf27fd02c07118e166a7c8fe603016ba2d3
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:1b9eff98f69d3f4cc7083f558cea07e73f24d7c864a6f956904969368acf4401
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:e1fb3df10a7f7862e8549ad29e4dad97b22719896c10fe5109cbfb3b98f56900
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:1b9eff98f69d3f4cc7083f558cea07e73f24d7c864a6f956904969368acf4401
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:e37e26fb0875b22cd18727da81bb228e503ad78769710a9d58676b7ffa05187b
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator@sha256:d0ec68445b8f4019fc2b59015a586f81fe60ddf9b52b0f174c79b08095954b57
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator@sha256:8ae4fd44260dbe07e0b20101e536fd18fed9af74e142b6b9e1b65b7ec96bfd09
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:f1819ab785383136dcacde50d130378e32b8e9c9fab468d4227c385265b377fa
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:27b87074e314be82131d33f4bc02fff95f9f6bdcd0881b34e780ed0b52e56912
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator@sha256:8ae4fd44260dbe07e0b20101e536fd18fed9af74e142b6b9e1b65b7ec96bfd09
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:f1819ab785383136dcacde50d130378e32b8e9c9fab468d4227c385265b377fa
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:27b87074e314be82131d33f4bc02fff95f9f6bdcd0881b34e780ed0b52e56912
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7-operator@sha256:e904ca87e72ccf90f73dec093d7f7d8e359b395b34a5f0773ba3f4b852638acb
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:f1819ab785383136dcacde50d130378e32b8e9c9fab468d4227c385265b377fa
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:2af82acbcbf5cce8df739ef925a88c68312127cadd21dbce0051ca850df7ab77
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:2af82acbcbf5cce8df739ef925a88c68312127cadd21dbce0051ca850df7ab77
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:f1819ab785383136dcacde50d130378e32b8e9c9fab468d4227c385265b377fa
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:f1819ab785383136dcacde50d130378e32b8e9c9fab468d4227c385265b377fa
image = registry.redhat.io/openshift-service-mesh/kiali-rhel7@sha256:339e4c28297246108392f7591cf031654654bd122006b59f60ae8dbe1f72ea50
~~~

Looking at which images are actually mirrored and with which tags (when running without --manifests-only):
~~~
[root@openshift-jumpserver-0 ~]# curl https://192.168.123.1:5000/v2/_catalog?n=500 | tr ',' '\n' | egrep 'kiali-rhel7-operator|server-operator-rhel|crw-2-rhel8-operator|kiali-rhel7|jaeger-rhel7-operator'
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 3875 100 3875 0 0 99k 0 -::- -::- -::- 102k
"codeready-workspaces/crw-2-rhel8-operator"
"codeready-workspaces/crw-2-rhel8-operator-metadata"
"codeready-workspaces/server-operator-rhel8"
"distributed-tracing/jaeger-rhel7-operator"
"distributed-tracing/jaeger-rhel7-operator-metadata"
"openshift-service-mesh/kiali-rhel7"
"openshift-service-mesh/kiali-rhel7-operator"
~~~

~~~
[root@openshift-jumpserver-0 ~]# curl https://192.168.123.1:5000/v2/_catalog?n=500 | tr ',' '\n' | egrep 'kiali-rhel7-operator|server-operator-rhel|crw-2-rhel8-operator|kiali-rhel7|jaeger-rhel7-operator' | while read line ; do url="https://192.168.123.1:5000/v2/$(echo -n $line | sed 's/"//g')/tags/list" ; curl $url ; done
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 3875 100 3875 0 0 102k 0 -::- -::- -::- 102k

{"name":"codeready-workspaces/crw-2-rhel8-operator","tags":["2752c195","c378ba87","ccdf3770","35407050","9725be8","2.2","c2672edc"]} {"name":"codeready-workspaces/crw-2-rhel8-operator-metadata","tags":["618291c7","670abdc6","4f5db9d9","92568e80","fc419e94","44c9ed5b","c3e153c8","483f7e15"]} {"name":"codeready-workspaces/server-operator-rhel8","tags":["2.0"]} {"name":"distributed-tracing/jaeger-rhel7-operator","tags":["1.13.2"]} {"name":"distributed-tracing/jaeger-rhel7-operator-metadata","tags":["2faec567"]} {"name":"openshift-service-mesh/kiali-rhel7","tags":["1.0.8","50a56ad8","1.12.7","1.0.7","927e8dec","a38af8b0","ec6a1539","d5ff1421","d9e839f5","d03775a2","d1f372fd"]} {"name":"openshift-service-mesh/kiali-rhel7-operator","tags":["1.0.8","1.0.11","1.0.5","cf2913c0","1.0.7","1.0.6","1a973581","1.0.9","1.0.12","8afa7ac5","6bef5355","1.12.7","325f5c08","1.0.10"]}

~~~

Is there a way to "get rid of" the tags and only use SHA signatures? Also, it looks as if the jaeger-rhel7-operator only ships with a tag, not with a SHA signature. Is this image part of OSSM?

Thanks,

Andreas