Bug 1449742 - Image SSA - image-inspector unable to pull image
Summary: Image SSA - image-inspector unable to pull image
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: SmartState Analysis
Version: 5.7.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: GA
: 5.8.1
Assignee: Erez Freiberger
QA Contact: Einat Pacifici
URL:
Whiteboard: container:smartstate
Depends On:
Blocks: 1491643
TreeView+ depends on / blocked
 
Reported: 2017-05-10 14:58 UTC by Javier Ramirez
Modified: 2020-12-14 08:38 UTC (History)
20 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1480625 1491643 (view as bug list)
Environment:
Last Closed: 2017-06-22 21:56:55 UTC
Category: ---
Cloudforms Team: Container Management
Target Upstream Version:
Embargoed:
epacific: automate_bug+

Attachments (Terms of Use)

Comment 4 Javier Ramirez 2017-05-10 15:05:02 UTC 
Created attachment 1277638 [details]
image-inspector-pod log
Comment 5 Javier Ramirez 2017-05-10 15:05:43 UTC 
Created attachment 1277640 [details]
docker logs
Comment 38 Einat Pacifici 2017-06-19 14:59:43 UTC 
Verified. 
Steps to recreate bug: 
=============================
Run in Openshift (provider that will be configured in CFME)
$docker login -p `oc sa get-token management-admin -n management-infra` $REGISTRY_IP
$docker pull registry.access.redhat.com/rhel
$docker tag registry.access.redhat.com/rhel $REGISTRY_IP/management-infra/rhel
$docker push $REGISTRY_IP/management-infra/rhel

In CFME: 
Go to compute --> Container Images
Look for image management-infra-rhel in registry 172.x.x.x
Smart State scan image

Result in OCP: 2017/06/19 07:43:03 Error inspecting image: Unable to create docker container: no such image

Steps to fix (use new image of image inspector for scanning)

In CFME: Configuration --> Advanced --> 

:ems_kubernetes:
   :miq_namespace: management-infra
    :image_inspector_registry: brew-pulpdocker01.web.prod.ext.phx2.redhat.com:8888 
 :image_inspector_repository: openshift3/image-inspector

In OCP: Ensure new-pulpdocker....is set in docker insecure registry.
Save
Rerun Smart State analysis on scan. 

Result: 
Scan completed successfully

Also, ran scans on other images in openshift registry, they also completed successfully.
Comment 42 Federico Simoncelli 2017-06-22 21:56:55 UTC 
This has been resolved with the release of the fix for bug 1459557

> Since the problem described in this bug report should be
> resolved in a recent advisory, it has been closed with a
> resolution of ERRATA.
> 
> For information on the advisory, and where to find the updated
> files, follow the link below.
> 
> If the solution does not work for you, open a new bug report.
> 
> https://access.redhat.com/errata/RHBA-2017:1556
Note You need to log in before you can comment on or make changes to this bug.