Bug 1917363

Summary: e2e: should be able to pull image from docker hub is failing permanently
Product: OpenShift Container Platform Reporter: Lukasz Szaszkiewicz <lszaszki>
Component: NodeAssignee: Ryan Phillips <rphillips>
Node sub component: Kubelet QA Contact: Weinan Liu <weinliu>
Status: CLOSED NOTABUG Docs Contact:
Severity: medium    
Priority: medium CC: aos-bugs, harpatil, nagrawal, tsweeney
Version: 4.3.0   
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1917416 (view as bug list) Environment:
Last Closed: 2021-02-23 10:45:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1917416    
Bug Blocks:    

Description Lukasz Szaszkiewicz 2021-01-18 10:56:20 UTC 
[k8s.io] Container Runtime blackbox test when running a container with a new image should be able to pull image from docker hub [NodeConformance] [Suite:openshift/conformance/parallel] [Suite:k8s] from ci/prow/e2e-gcp job on 4.3 is broken permanently.


The test keeps failing because it is unable to download an image (permission denied) - I've opened https://github.com/openshift/origin/pull/25801 to debug it.

```
Jan 15 14:14:43.380: INFO: No.3 container not ready, err: expected container state: Running, got: "Waiting", details: msg = rpc error: code = Unknown desc = Error reading manifest 3.7 in quay.io/sjenning/alpine: unauthorized: access to the requested resource is not authorized, reason = ErrImagePull
Jan 15 14:14:44.398: INFO: No.3 container not ready, err: expected container state: Running, got: "Waiting", details: msg = Back-off pulling image "quay.io/sjenning/alpine:3.7", reason = ImagePullBackOff
```


The failing test is blocking other PRs from being merged into 4.3 branch (security fixes)