Bug 1956281
Summary: | Disconnected installs are failing with kubelet trying to pause image from the internet | ||
---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | Stephen Benjamin <stbenjam> |
Component: | Node | Assignee: | Peter Hunt <pehunt> |
Node sub component: | CRI-O | QA Contact: | Sunil Choudhary <schoudha> |
Status: | CLOSED ERRATA | Docs Contact: | |
Severity: | urgent | ||
Priority: | urgent | CC: | aos-bugs, dwalsh, jokerman, pehunt, pmuller, wking |
Version: | 4.8 | ||
Target Milestone: | --- | ||
Target Release: | 4.8.0 | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2021-07-27 23:05:53 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Stephen Benjamin
2021-05-03 11:42:15 UTC
This is blocking new nightlies. So bootstrap overrides this with /etc/kubernetes/kubelet-pause-image-override, which uses the 'pod' image from the release payload. I believe to make this work is you need to carry the 3.5 changes from https://github.com/kubernetes/kubernetes/pull/100292 in openshift/kubernetes I think this will be fixed by the attached PR (updating bootstrap process to handle new crio config behavior) Tested with payload 4.8.0-0.nightly-2021-05-06-210840. Deployed an IPI on AWS with disconnected environment. $ oc get clusterversion NAME VERSION AVAILABLE PROGRESSING SINCE STATUS version 4.8.0-0.nightly-2021-05-06-210840 True False 28m Cluster version is 4.8.0-0.nightly-2021-05-06-210840 $ oc get nodes -o wide NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME ip-10-0-55-209.us-east-2.compute.internal Ready worker 43m v1.21.0-rc.0+291e731 10.0.55.209 <none> Red Hat Enterprise Linux CoreOS 48.84.202105061618-0 (Ootpa) 4.18.0-293.el8.x86_64 cri-o://1.21.0-89.rhaos4.8.git3f6209a.el8 ip-10-0-58-66.us-east-2.compute.internal Ready master 55m v1.21.0-rc.0+291e731 10.0.58.66 <none> Red Hat Enterprise Linux CoreOS 48.84.202105061618-0 (Ootpa) 4.18.0-293.el8.x86_64 cri-o://1.21.0-89.rhaos4.8.git3f6209a.el8 ip-10-0-61-121.us-east-2.compute.internal Ready worker 43m v1.21.0-rc.0+291e731 10.0.61.121 <none> Red Hat Enterprise Linux CoreOS 48.84.202105061618-0 (Ootpa) 4.18.0-293.el8.x86_64 cri-o://1.21.0-89.rhaos4.8.git3f6209a.el8 ip-10-0-61-45.us-east-2.compute.internal Ready master 55m v1.21.0-rc.0+291e731 10.0.61.45 <none> Red Hat Enterprise Linux CoreOS 48.84.202105061618-0 (Ootpa) 4.18.0-293.el8.x86_64 cri-o://1.21.0-89.rhaos4.8.git3f6209a.el8 ip-10-0-68-220.us-east-2.compute.internal Ready master 55m v1.21.0-rc.0+291e731 10.0.68.220 <none> Red Hat Enterprise Linux CoreOS 48.84.202105061618-0 (Ootpa) 4.18.0-293.el8.x86_64 cri-o://1.21.0-89.rhaos4.8.git3f6209a.el8 ip-10-0-75-161.us-east-2.compute.internal Ready worker 43m v1.21.0-rc.0+291e731 10.0.75.161 <none> Red Hat Enterprise Linux CoreOS 48.84.202105061618-0 (Ootpa) 4.18.0-293.el8.x86_64 cri-o://1.21.0-89.rhaos4.8.git3f6209a.el8 sh-4.4# cat /etc/crio/crio.conf.d/00-default | grep pause_image pause_image = "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c29777c0c62fa28843ae7be123e65d844dc48842db0ed50b7f7f3cb1c29caa15" pause_image_auth_file = "/var/lib/kubelet/config.json" Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: OpenShift Container Platform 4.8.2 bug fix and security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2021:2438 |