Bug 1813419
| Summary: | [4.4] CI: deployment error: more unauth image pulls with image change triggers | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Gabe Montero <gmontero> |
| Component: | openshift-controller-manager | Assignee: | Gabe Montero <gmontero> |
| Status: | CLOSED ERRATA | QA Contact: | wewang <wewang> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 4.4 | CC: | adam.kaplan, aos-bugs, mfojtik, obulatov, wewang |
| Target Milestone: | --- | ||
| Target Release: | 4.4.0 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | devex | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: |
Cause: the local ref setting on imagestreams can be ignored if imagestream access occurs very soon after cluster startup or restart of the openshift controller manager because the openshift controller manager might have stale imagestreams its cache with incomplete metadata
Consequence: if the imagestream was backed by a private registry which the internal image registry had credentials for, but the consumer did not have credentials for, the subsequent image pull would fail
Fix: the openshift controller manager was updated to refresh its imagestream cache if it was apparent the metadata initialization was incomplete
Result: local ref imagestream policy is preserved even during the timing windows that occur immediately after cluster start or openshift controller manager restart
|
Story Points: | --- |
| Clone Of: | 1813361 | Environment: | |
| Last Closed: | 2020-05-04 11:46:21 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1813361 | ||
| Bug Blocks: | 1813420 | ||
|
Comment 1
Gabe Montero
2020-03-19 15:21:54 UTC
Checked job which include build passed, especially [Feature:Builds][Conformance] oc new-app [Top Level] [Feature:Builds][Conformance] oc new-app should succeed with a --name of 58 characters [Suite:openshift/conformance/parallel/minimal] job: https://prow.svc.ci.openshift.org/view/gcs/origin-ci-test/pr-logs/pull/openshift_openshift-controller-manager/74/pull-ci-openshift-openshift-controller-manager-release-4.4-e2e-aws/23 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:0581 |