-
Bug
-
Resolution: Unresolved
-
Major
-
1.9.0
-
1
-
False
-
-
False
-
Release Note Not Required
-
-
Description of problem:
Authorization errors preventing from installing downstream CI builds of the Operator on ARO clusters.
Prerequisites (if any, like setup, operators/versions):
- Connected to an ARO cluster
Steps to Reproduce
Just run the script as per the instructions: https://github.com/redhat-developer/rhdh-operator/blob/main/.rhdh/docs/installing-ci-builds.adoc#procedure
Actual results:
iewer-role_rbac.authorization.k8s.io_v1_clusterrole.yaml' [DEBUG] replacing refs to internal registries in file './bundles/3170da029869d15a246ad31d0debd4b9c03ba13855fb877a754cfdffb2286b80/unpacked/rootfs/manifests/rhdh-operator.csv.yaml' [DEBUG] replacing refs to internal registries in file './bundles/3170da029869d15a246ad31d0debd4b9c03ba13855fb877a754cfdffb2286b80/unpacked/rootfs/manifests/rhdh.redhat.com_backstages.yaml' [DEBUG] replacing refs to internal registries in file './bundles/3170da029869d15a246ad31d0debd4b9c03ba13855fb877a754cfdffb2286b80/unpacked/rootfs/metadata/annotations.yaml' [DEBUG] Repacking image ./bundles/3170da029869d15a246ad31d0debd4b9c03ba13855fb877a754cfdffb2286b80/src => ./bundles/3170da029869d15a246ad31d0debd4b9c03ba13855fb877a754cfdffb2286b80/unpacked... [DEBUG] Pushing updated image: ./bundles/3170da029869d15a246ad31d0debd4b9c03ba13855fb877a754cfdffb2286b80/src => default-route-openshift-image-registry.apps.nmlgibh8h15bab8588.centralindia.aroapp.io/rhdh/rhdh-operator-bundle:3170da029869d15a246ad31d0debd4b9c03ba13855fb877a754cfdffb2286b80... Getting image source signatures Copying blob sha256:152aa618d59a348dbc9255a590fa5ef0be96a6f7466e74862996b283c1abecbf time="2026-02-10T14:15:09Z" level=fatal msg="trying to reuse blob sha256:9e9ba4af91f81b733310010d1d05afa39c8001f2eb349fb67abf4161daa6658c at destination: failed to read from destination repository rhdh/rhdh-operator-bundle: 403 (Forbidden)" make[1]: *** [run-in-runner] Error 1 make: *** [deploy-operator] Error 2
Expected results:
It should work.
As discussed on Slack, per https://access.redhat.com/solutions/6022011, we might need to add the following command to the script to fix this issue:
oc patch configs.imageregistry.operator.openshift.io/cluster --patch '{"spec":{"disableRedirect":true}}' --type=merge
Reproducibility (Always/Intermittent/Only Once):
Always