Bug 1484068
| Summary: | [3.4] installer need provide a way to add docker auth to kubelet for auto pulling infra image from an authenticated registry | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Michael Gugino <mgugino> | 
| Component: | Installer | Assignee: | Michael Gugino <mgugino> | 
| Status: | CLOSED ERRATA | QA Contact: | Johnny Liu <jialiu> | 
| Severity: | medium | Docs Contact: | |
| Priority: | high | ||
| Version: | 3.4.0 | CC: | agoldste, akostadi, aos-bugs, avagarwa, bleanhar, broskos, cpatters, dakini, erich, jialiu, jokerman, mmccomas, sdodson, xtian | 
| Target Milestone: | --- | Keywords: | OpsBlocker | 
| Target Release: | 3.4.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Enhancement | |
| Doc Text: | Feature: The installer now allows you to specify the variables 'oreg_auth_user' and 'oreg_auth_password' to specify the credentials used to pull infrastructure images from an authenticated registry which is defined by setting 'oreg_url'.
Reason: Your environment may require credentials to pull infrastructure images from your private registry defined via oreg_url.
Result: OCP may now pull images from a private registry requiring username and password credentials. | Story Points: | --- | 
| Clone Of: | 1484063 | Environment: | |
| Last Closed: | 2017-10-17 11:45:24 UTC | Type: | Bug | 
| Regression: | --- | Mount Type: | --- | 
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1316341, 1481251, 1484063, 1500642 | ||
| Bug Blocks: | |||
| 
        
          Comment 1
        
        
          Michael Gugino
        
        
        
        
        
          2017-08-22 16:05:43 UTC
        
       Waiting for newer errata puddle to include the fix. Due no AtomicOpenShift-errata puddle including the fix, switch to AtomicOpenShift puddle to do verification. Unfortunately, openshift-ansible-3.4.134-1.git.0.b0e4e16.el7.noarch.rpm still does not include this fix. Support for registry authentication on containerized hosts added in master. PR backported: https://github.com/openshift/openshift-ansible/pull/5419 Re-test this bug with openshift-ansible-3.4.138-1.git.0.b2c0b40.el7.noarch, and FAIL. Similar issue like https://bugzilla.redhat.com/show_bug.cgi?id=1316341#c54 Verified this bug with atomic-openshift v3.4.1.44.26 + openshift-ansible-3.4.142-1.git.0.b5b1a6a.el7, and PASS. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:2900 |