oc cluster up currently doesn't create an admission controller / pull policy that lets imagestreams be used for k8s resources. oc v3.9.0+191fece kubernetes v1.9.1+a0ce1bc657 features: Basic-Auth GSSAPI Kerberos SPNEGO
Fix: https://github.com/openshift/origin/pull/19908
Verified # oc version oc v3.10.0-0.60.0 kubernetes v1.10.0+b81c8f8 # oc cluster up --image='xxxx/openshift3/ose-${component}:${version}' --loglevel=8 --base-dir=dir # docker exec 6dd070d8684fc74554af76bf0e00615ecc27ea4460d2f95cdc50fec9868ecc65 cat /etc/origin/master/master-config.yaml admissionConfig: pluginConfig: openshift.io/ImagePolicy: configuration: apiVersion: v1 executionRules: - matchImageAnnotations: - key: images.openshift.io/deny-execution value: "true" name: execution-denied onResources: - resource: pods - resource: builds reject: true skipOnResolutionFailure: true kind: ImagePolicyConfig location: ""
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:1816