Bug 1481251

Summary: [3.6] Regression or change in how kubelet pull credentials are defined?
Product: OpenShift Container Platform Reporter: Scott Dodson <sdodson>
Component: NodeAssignee: Seth Jennings <sjenning>
Status: CLOSED ERRATA QA Contact: Johnny Liu <jialiu>
Severity: medium Docs Contact:
Priority: high    
Version: 3.6.0CC: agoldste, akostadi, aos-bugs, avagarwa, bleanhar, broskos, cpatters, dakini, erich, jeder, jialiu, jokerman, mifiedle, mmccomas, sdodson, xtian
Target Milestone: ---Keywords: OpsBlocker
Target Release: 3.6.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1316341 Environment:
Last Closed: 2017-09-08 03:15:23 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1316341, 1484063, 1484068, 1500642    

Comment 1 Scott Dodson 2017-08-14 12:45:17 UTC
According to QE, the .docker/config.json is no longer read by the kubelet to specify pull credentials.

Comment 4 Seth Jennings 2017-08-21 16:18:03 UTC
tl;dr switching to the dockershim client for the CRI changed this behavior

Upstream issue:
https://github.com/kubernetes/kubernetes/issues/45738

And fix (for kube 1.7);
https://github.com/kubernetes/kubernetes/pull/46236

Origin 1.6 PR
https://github.com/openshift/origin/pull/15880

Comment 11 Johnny Liu 2017-09-06 10:40:49 UTC
Verified this bug with atomic-openshift-3.6.173.0.27-1.git.0.c1ae33f.el7.x86_64, and PASS.

In my previous verification - comment 6, the failure is because I saved docker registry creds in /var/lib/origin/, but not /var/lib/origin/.docker, after move it to /var/lib/origin/.docker, it works (though it also worked when docker registry creds is saved in /var/lib/origin/ before this regression was introduced, now user have to save docker registry creds in /var/lib/origin/).

Comment 12 Johnny Liu 2017-09-06 11:11:37 UTC
Also run the same testing with atomic-openshift-3.6.173.0.21-1.git.0.f95b0e7.el7.x86_64, also PASS.

Comment 14 errata-xmlrpc 2017-09-08 03:15:23 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:2642