-
Bug
-
Resolution: Done
-
Blocker
-
None
-
quay-v3.11.9
-
None
-
False
-
-
False
-
-
-
Critical
Description
QBO 3.11.9 pull non-exist ose-kube-rbac-proxy image, cause QBO installation failed
Version
quay-bridge-operator-bundle-container-v3.11.9-1
Reproduced steps
1. install QBO 3.11.9
Actual results
QBO installation fails, pod is not running
$ oc describe pod quay-bridge-operator-6d6c976cb8-cc5fv -n openshift-operators Name: quay-bridge-operator-6d6c976cb8-cc5fv Namespace: openshift-operators Priority: 0 Service Account: quay-bridge-operator Node: ip-10-0-34-43.us-east-2.compute.internal/10.0.34.43 Start Time: Tue, 18 Feb 2025 19:37:47 +0800 Labels: name=quay-bridge-operator pod-template-hash=6d6c976cb8 Annotations: alm-examples: [ { "apiVersion": "quay.redhat.com/v1", "kind": "QuayIntegration", "metadata": { "name": "quay" }, "spec": { "clusterID": "openshift", "credentialsSecret": { "name": "quay-credentials", "namespace": "openshift-operators" }, "insecureRegistry": false } } ] capabilities: Full Lifecycle categories: OpenShift Optional containerImage: registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:cc9ad427b952e0d5ab83a55b43a21a2ccf2eb5a128bcd028591c58aeb10007b3 createdAt: 2021-07-09 14:07 UTC description: Enhance OCP using Red Hat Red Hat container registry features.operators.openshift.io/disconnected: true features.operators.openshift.io/fips-compliant: true features.operators.openshift.io/proxy-aware: false features.operators.openshift.io/tls-profiles: false features.operators.openshift.io/token-auth-aws: false features.operators.openshift.io/token-auth-azure: false features.operators.openshift.io/token-auth-gcp: false k8s.ovn.org/pod-networks: {"default":{"ip_addresses":["10.131.2.41/23"],"mac_address":"0a:58:0a:83:02:29","gateway_ips":["10.131.2.1"],"routes":[{"dest":"10.128.0.0... k8s.v1.cni.cncf.io/network-status: [{ "name": "ovn-kubernetes", "interface": "eth0", "ips": [ "10.131.2.41" ], "mac": "0a:58:0a:83:02:29", "default": true, "dns": {} }] olm.operatorGroup: global-operators olm.operatorNamespace: openshift-operators olm.skipRange: >=3.8.x <3.11.9 olm.targetNamespaces: olmcahash: 99aac0bdb2c0055ca6f4cbd5fdab398b117598f0c8cf8538cb645ec78a752a3a openshift.io/scc: restricted-v2 operatorframework.io/properties: {"properties":[{"type":"olm.gvk","value":{"group":"quay.redhat.com","kind":"QuayIntegration","version":"v1"}},{"type":"olm.package","value... operators.openshift.io/infrastructure-features: ["disconnected", "fips"] operators.openshift.io/valid-subscription: ["OpenShift Platform Plus", "Red Hat Quay"] operators.operatorframework.io/builder: operator-sdk-v1.9.0+git operators.operatorframework.io/project_layout: go.kubebuilder.io/v3 quay-version: 3.11.9 repository: https://github.com/quay/quay-bridge-operator seccomp.security.alpha.kubernetes.io/pod: runtime/default Status: Pending SeccompProfile: RuntimeDefault IP: 10.131.2.41 IPs: IP: 10.131.2.41 Controlled By: ReplicaSet/quay-bridge-operator-6d6c976cb8 Containers: kube-rbac-proxy: Container ID: Image: registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:bd36d38375b23ce370f5f5f015b1381da664222b36d221102f60d16a6c42af66 Image ID: Port: 8443/TCP Host Port: 0/TCP Args: --secure-listen-address=0.0.0.0:8443 --upstream=http://127.0.0.1:8080/ --logtostderr=true --v=10 State: Waiting Reason: ErrImagePull Ready: False Restart Count: 0 Environment: OPERATOR_CONDITION_NAME: quay-bridge-operator.v3.11.9 Mounts: /apiserver.local.config/certificates from apiservice-cert (rw) /tmp/k8s-webhook-server/serving-certs from webhook-cert (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-k4wqm (ro) manager: Container ID: cri-o://bfc94108a1c78a226dd96b3737176f35b88b2c2f843ecdf399b6255bc2e50686 Image: registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:cc9ad427b952e0d5ab83a55b43a21a2ccf2eb5a128bcd028591c58aeb10007b3 Image ID: registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:6134fd306361614404008d9c8d38d41a88e5d496fe27d7e359f46d6f30fe9dc3 Port: 9443/TCP Host Port: 0/TCP Command: /manager Args: --health-probe-bind-address=:8081 --metrics-bind-address=127.0.0.1:8080 --leader-elect State: Running Started: Tue, 18 Feb 2025 19:37:51 +0800 Ready: True Restart Count: 0 Limits: cpu: 200m memory: 512Mi Requests: cpu: 200m memory: 400Mi Liveness: http-get http://:8081/healthz delay=15s timeout=1s period=20s #success=1 #failure=3 Readiness: http-get http://:8081/readyz delay=5s timeout=1s period=10s #success=1 #failure=3 Environment: OPERATOR_CONDITION_NAME: quay-bridge-operator.v3.11.9 Mounts: /apiserver.local.config/certificates from apiservice-cert (ro) /tmp/k8s-webhook-server/serving-certs from webhook-cert (rw) /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-k4wqm (ro) Conditions: Type Status PodReadyToStartContainers True Initialized True Ready False ContainersReady False PodScheduled True Volumes: apiservice-cert: Type: Secret (a volume populated by a Secret) SecretName: quay-bridge-operator-service-cert Optional: false webhook-cert: Type: Secret (a volume populated by a Secret) SecretName: quay-bridge-operator-service-cert Optional: false kube-api-access-k4wqm: Type: Projected (a volume that contains injected data from multiple sources) TokenExpirationSeconds: 3607 ConfigMapName: kube-root-ca.crt ConfigMapOptional: <nil> DownwardAPI: true ConfigMapName: openshift-service-ca.crt ConfigMapOptional: <nil> QoS Class: Burstable Node-Selectors: <none> Tolerations: node.kubernetes.io/memory-pressure:NoSchedule op=Exists node.kubernetes.io/not-ready:NoExecute op=Exists for 300s node.kubernetes.io/unreachable:NoExecute op=Exists for 300s Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal Scheduled 45s default-scheduler Successfully assigned openshift-operators/quay-bridge-operator-6d6c976cb8-cc5fv to ip-10-0-34-43.us-east-2.compute.internal Normal AddedInterface 45s multus Add eth0 [10.131.2.41/23] from ovn-kubernetes Normal Pulling 45s kubelet Pulling image "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:cc9ad427b952e0d5ab83a55b43a21a2ccf2eb5a128bcd028591c58aeb10007b3" Normal Pulled 42s kubelet Successfully pulled image "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:cc9ad427b952e0d5ab83a55b43a21a2ccf2eb5a128bcd028591c58aeb10007b3" in 2.941s (2.941s including waiting). Image size: 147017959 bytes. Normal Created 42s kubelet Created container manager Normal Started 42s kubelet Started container manager Normal Pulling 21s (x2 over 45s) kubelet Pulling image "registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:bd36d38375b23ce370f5f5f015b1381da664222b36d221102f60d16a6c42af66" Warning Failed 20s (x2 over 45s) kubelet Failed to pull image "registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:bd36d38375b23ce370f5f5f015b1381da664222b36d221102f60d16a6c42af66": reading manifest sha256:bd36d38375b23ce370f5f5f015b1381da664222b36d221102f60d16a6c42af66 in registry.redhat.io/openshift4/ose-kube-rbac-proxy: manifest unknown Warning Failed 20s (x2 over 45s) kubelet Error: ErrImagePull Normal BackOff 8s (x4 over 41s) kubelet Back-off pulling image "registry.redhat.io/openshift4/ose-kube-rbac-proxy@sha256:bd36d38375b23ce370f5f5f015b1381da664222b36d221102f60d16a6c42af66" Warning Failed 8s (x4 over 41s) kubelet Error: ImagePullBackOff