Bug 1529867

Description of problem:

We use ansible playbook to create origin and enterprise clusters. Playbook calls origin-ansible playbook. Internal docker registry stores business docker images. All works well for us on 3.6.

We're upgrading to 3.7. We're doing minimal changes to our setup, following the release notes [1].

We expected that our deployment should still work, we expected no security related change for internal registry.

We see an authentication issues when pods using images from the internal docker registry are created.

The issue is identical to issue on github [2], including log entries, error message and setup. We see pods entering ImagePullBackOff and logging authentication issues.

Authentication to registry is done through a secret. The secret is create using a token from a dedicated user. We have a custom project, e.g. PROJECT. The user has the rights it needs to access PROJECT, push and pull images from the registry, and access default project.

[1] https://docs.openshift.com/container-platform/latest/release_notes/ocp_3_7_release_notes.html
[2] https://github.com/openshift/origin/issues/17523


Version-Release number of selected component (if applicable):
3.7


How reproducible:

Update to Openshift v3.7 with a custom service account with rights to push and pull image from the registry, see  https://github.com/openshift/origin/issues/17523

Actual results:
We see pods entering ImagePullBackOff and logging authentication issues

Expected results:
Push and pull with success using custom service accounts

Additional info:


Description of problem:

Version-Release number of the following components:
rpm -q openshift-ansible
rpm -q ansible
ansible --version

How reproducible:

Steps to Reproduce:
1.
2.
3.

Actual results:
Please include the entire output from the last TASK line through the end of output if an error is generated

Expected results:

Additional info:
Please attach logs from ansible-playbook with the -vvv flag


Description of problem:

Version-Release number of the following components:
rpm -q openshift-ansible
rpm -q ansible
ansible --version

How reproducible:

Steps to Reproduce:
1.
2.
3.

Actual results:
Please include the entire output from the last TASK line through the end of output if an error is generated

Expected results:

Additional info:
Please attach logs from ansible-playbook with the -vvv flag