Bug 1708307
| Summary: | Gather bootstrap doesn't have perms to gather | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Chris Callegari <ccallega> | ||||||
| Component: | Installer | Assignee: | Jeremiah Stuever <jstuever> | ||||||
| Installer sub component: | openshift-installer | QA Contact: | sheng.lao <shlao> | ||||||
| Status: | CLOSED ERRATA | Docs Contact: | |||||||
| Severity: | unspecified | ||||||||
| Priority: | unspecified | CC: | aos-bugs, bleanhar, eparis, jokerman, lmohanty, mmccomas, shlao, wking | ||||||
| Version: | 4.1.0 | Keywords: | Reopened | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | 4.1.0 | ||||||||
| Hardware: | Unspecified | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2019-06-04 10:48:39 UTC | Type: | Bug | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
|
Description
Chris Callegari
2019-05-09 14:55:13 UTC
Created attachment 1566187 [details]
log-bundle.tar.gz
Created attachment 1566188 [details]
openshift_install_dir.tar.gz
I can leave mycluster infrastructure up and running for today (05/09/2019) but I will have to destroy it at end of business day. I see this same failure behavior when trying to deploy via the UPI method as well looking at the gathered logs less bootstrap/journals/bootkube.log ``` May 09 14:45:10 ip-10-0-13-157 systemd[1]: Started Bootstrap a Kubernetes cluster. May 09 14:45:13 ip-10-0-13-157 bootkube.sh[1381]: Pulling release image... May 09 14:45:14 ip-10-0-13-157 bootkube.sh[1381]: error pulling image "registry.svc.ci.openshift.org/ocp/release@sha256:1cb302f7f7508582c5150ee908279e4a52614e801b9785a11b74b1ae7834f501": unable to pull registry.svc.ci.openshift.org/ocp/release@sha256:1cb302f7f7508582c5150ee908279e4a52614e801b9785a11b74b1ae7834f501: unable to pull image: Error determining manifest MIME type for docker://registry.svc.ci.openshift.org/ocp/release@sha256:1cb302f7f7508582c5150ee908279e4a52614e801b9785a11b74b1ae7834f501: Error reading manifest sha256:1cb302f7f7508582c5150ee908279e4a52614e801b9785a11b74b1ae7834f501 in registry.svc.ci.openshift.org/ocp/release: unauthorized: authentication required ``` Looks like your pull secret is not valid. Please use the correct pull secret. ARG! My pull secret has gone invalid more than once in the past 6 months. Is there a way to test it? I'm reopening. The failure to install is irrelevant. I want this to track must gather complaining about not having access for all of those files. Jeremiah, Can you look at the installer-gather.sh output above? I think you had mentioned that there were changes that went in after it was originally introduced that created problems. We need to fix those. > My pull secret has gone invalid more than once in the past 6 months. Is there a way to test it? The keys from [1] are good forever, although new authorities may be added to them. So a key from there will always successfully install a given release image, but you may need to re-fetch keys to install newer release images. Nightlies and other CI images (e.g. from [2]) require an additional authority to fetch from the CI registry. That key expires each month, and requires you to be in the OpenShift GitHub org, etc. This going stale is your problem above. There is an open ticket for preflighting these creds: bug 1662106 [1]: https://cloud.redhat.com/openshift/install [2]: https://openshift-release.svc.ci.openshift.org/ I dunno how the errata tool decides to push things into ON_QA, but this isn't in the most-recent nightly yet: $ oc adm release info --commits registry.svc.ci.openshift.org/ocp/release:4.1.0-0.nightly-2019-05-09-223828 | grep ' installer ' installer https://github.com/openshift/installer 403a93d1f683384800597ac38e9c2fc0180b3a5d $ git log --first-parent --format='%ad %h %d %s' --date=iso 403a93d1f68..origin/master 2019-05-09 23:22:59 +0200 59e927d2b (HEAD -> master, origin/release-4.2, origin/release-4.1, origin/master, origin/HEAD) Merge pull request #1735 from jstuever/bz1708307 *** Bug 1706750 has been marked as a duplicate of this bug. *** Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:0758 |