Bug 1507787 - default ansible_service_broker_etcd_image_prefix should use fully qualified etcd image name
Summary: default ansible_service_broker_etcd_image_prefix should use fully qualified e...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Installer
Version: 3.7.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 3.7.0
Assignee: Fabian von Feilitzsch
QA Contact: Johnny Liu
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-10-31 07:34 UTC by Johnny Liu
Modified: 2017-11-28 08:28 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-11-10 20:59:58 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2017:3188 0 normal SHIPPED_LIVE Moderate: Red Hat OpenShift Container Platform 3.7 security, bug, and enhancement update 2017-11-29 02:34:54 UTC

Description Johnny Liu 2017-10-31 07:34:28 UTC
Description of problem:
According to BZ#1506138, default __ansible_service_broker_etcd_image_prefix in roles/ansible_service_broker/vars/openshift-enterprise.yml should be set to:
registry.access.redhat.com/rhel7/;

In openshift-ansible-3.7.0-0.185.0.git.0.eb61aff.el7.noarch code, it is:
__ansible_service_broker_etcd_image_prefix: rhel7/

Which will lead to the following error:
# oc get po
NAME           READY     STATUS             RESTARTS   AGE
asb-7-deploy   0/1       Error              0          39m
asb-8-deploy   1/1       Running            0          4m
asb-8-nspbk    0/2       CrashLoopBackOff   5          4m

# oc describe po asb-8-nspbk
<--snip-->
  4m		4m		2	kubelet, qe-chezhang-1node-registry-router-1	spec.containers{asb}	Normal		Created			Created container
  4m		4m		2	kubelet, qe-chezhang-1node-registry-router-1	spec.containers{asb}	Normal		Started			Started container
  4m		4m		3	kubelet, qe-chezhang-1node-registry-router-1	spec.containers{etcd}	Normal		BackOff			Back-off pulling image "rhel7/etcd:latest"
  4m		4m		3	kubelet, qe-chezhang-1node-registry-router-1	spec.containers{etcd}	Warning		Failed			Error: ImagePullBackOff
  4m		4m		2	kubelet, qe-chezhang-1node-registry-router-1	spec.containers{etcd}	Normal		Pulling			pulling image "rhel7/etcd:latest"
  4m		4m		3	kubelet, qe-chezhang-1node-registry-router-1	spec.containers{asb}	Warning		BackOff			Back-off restarting failed container
  4m		4m		2	kubelet, qe-chezhang-1node-registry-router-1	spec.containers{etcd}	Warning		Failed			Failed to pull image "rhel7/etcd:latest": rpc error: code = 2 desc = errors:
denied: requested access to the resource is denied
unauthorized: authentication required

  4m	4m	2	kubelet, qe-chezhang-1node-registry-router-1	spec.containers{etcd}	Warning	Failed	Error: ErrImagePull

In this case, we set "registry.reg-aws.openshift.com" to openshift_docker_additional_registries for openshift-ansible inventory host file.


Version-Release number of the following components:
openshift-ansible-3.7.0-0.185.0.git.0.eb61aff.el7.noarch

How reproducible:
Always

Steps to Reproduce:
1.
2.
3.

Actual results:
Please include the entire output from the last TASK line through the end of output if an error is generated

Expected results:

Additional info:
Please attach logs from ansible-playbook with the -vvv flag

Comment 1 Fabian von Feilitzsch 2017-11-03 19:37:06 UTC
https://github.com/openshift/openshift-ansible/pull/6010

Comment 2 openshift-github-bot 2017-11-06 02:49:57 UTC
Commits pushed to master at https://github.com/openshift/openshift-ansible

https://github.com/openshift/openshift-ansible/commit/e760ccf93410c94f174a694f3d6bb02f5a5c82e9
Bug 1507787- add full path to default asb etcd image

https://github.com/openshift/openshift-ansible/commit/5f08527527b11afce4b7676f32e0dd99eae86546
Merge pull request #6010 from fabianvf/1507787-asb-fix-ocp-defaults

Bug 1507787- add full path to default asb etcd image

Comment 4 Johnny Liu 2017-11-07 06:18:58 UTC
Verified this bug with openshift-ansible-3.7.0-0.196.0.git.0.27cd7ec.el7.noarch, and PASS.


# oc get dc asb -n openshift-ansible-service-broker -o yaml | grep etcd | grep image
        image: registry.access.redhat.com/rhel7/etcd:latest


Note You need to log in before you can comment on or make changes to this bug.