This is blocking testing behind proxy
The registry version seems to be v2.6.2
# oc logs docker-registry-1-fc7f4 |grep distribution_version
time="2017-11-13T08:15:29.183080643Z" level=info msg="start registry" distribution_version="v2.6.2+unknown" kubernetes_version=v1.7.6+a08f5eeb62 openshift_version=v3.7.7
I think this is a regression and therefore a blocker. I think the fix is to ensure that the kube service ip is added to the no_proxy list. There's another bug on this that's got more information, let me find that.
I think this is a dupe of https://bugzilla.redhat.com/show_bug.cgi?id=1504464 and I think the correct way to fix this is to set KUBERNETES_MASTER='kubernetes.svc.default' on the registry whenever we configure a proxy so that it connects to the api server via dns name rather than ip address.
Since we actually regressed this in 3.6.z this is by definition not a 3.7 blocker. We'll fix this ASAP however, ideally on 3.7 GA day.
(In reply to Scott Dodson from comment #5)
> I think this is a dupe of
> https://bugzilla.redhat.com/show_bug.cgi?id=1504464 and I think the correct
> way to fix this is to set KUBERNETES_MASTER='kubernetes.svc.default' on the
I'm thinking that the correct route should be "kubernetes.default.svc" :)
I tried with setting KUBERNETES_MASTER='kubernetes.default.svc', things still don't work.
After appending `172.30.0.1` to NO_PROXY of docker-registry dc, build succeeded.
# oc env dc/docker-registry NO_PROXY=<--snip-->,172.30.0.1
I think the fix should be backport to 3.7 branch, and fix this 3.7 bug, this is really a very basic functionality (sti build behind proxy)
Before backport the PR to 3.7, pls fix Bug 1541625 together, Bug 1541625 is introduced by this PR.
ACK, lets treat this as the bug to track the backport from master.
Need to backport these two to release-3.7 for this bug
*** Bug 1544073 has been marked as a duplicate of this bug. ***
*** Bug 1544682 has been marked as a duplicate of this bug. ***
Verified this bug with openshift-ansible-3.9.0-0.48.0.git.0.2fb33db.el7.noarch, and PASS.
# oc env dc docker-registry --list |grep -i proxy
kubernetes svc IP (172.31.0.1) is added into NO_PROXY list, sti build succeed.
# oc get po -n install-test
NAME READY STATUS RESTARTS AGE
mongodb-1-4w6ln 1/1 Running 0 2h
nodejs-mongodb-example-1-build 0/1 Completed 0 2h
nodejs-mongodb-example-1-r5g6c 1/1 Running 0 2h
Fixed in openshift-ansible-3.7.42-1 and later
*** Bug 1575050 has been marked as a duplicate of this bug. ***