Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1756475

Summary: Cannot disable S3 redirect via operator
Product: OpenShift Container Platform Reporter: Adam Kaplan <adam.kaplan>
Component: Image RegistryAssignee: Oleg Bulatov <obulatov>
Status: CLOSED ERRATA QA Contact: Wenjing Zheng <wzheng>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 4.3.0CC: aos-bugs, xiuwang
Target Milestone: ---   
Target Release: 4.3.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1756478 (view as bug list) Environment:
Last Closed: 2020-05-13 21:25:54 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1756478    

Description Adam Kaplan 2019-09-27 17:39:12 UTC 
Description of problem:
docker/distribution supports a "redirect" option for supported drivers like s3 [1].
In this case read requests (HEAD, GET) are redirected to the storage provider. This is enabled by default in the image registry.

There are several cases where the redirect breaks either Docker clients, or storage providers which implement the s3 API. Cluster admins should be able to disable this behavior.


Version-Release number of selected component (if applicable): 4.3.0


Additional info:

[1] https://docs.docker.com/registry/configuration/#redirect
Comment 2 XiuJuan Wang 2019-10-16 06:43:12 UTC 
Verified this issue in 4.3.0-0.nightly-2019-10-15-180816 version
Could disable redirect via operator.
$oc patch config.image/cluster -p '{"spec":{"disableRedirect":true}}' --type=merge
$ oc get pods
 NAME                                               READY   STATUS    RESTARTS   AGE
cluster-image-registry-operator-5df46d9fc7-554j4   2/2     Running   0          3h54m
image-registry-564cc67cd6-8gdb9                    1/1     Running   0          22s
node-ca-4gxqt                                      1/1     Running   0          3h53m
node-ca-fgqs2                                      1/1     Running   0          3h53m
node-ca-q5h84                                      1/1     Running   0          3h52m
node-ca-q5pr4                                      1/1     Running   0          3h52m
node-ca-w4kkn                                      1/1     Running   0          3h53m

$oc set env deployment image-registry  --list | grep -i redirect
REGISTRY_STORAGE_REDIRECT_DISABLE=true

$ oc logs -f image-registry-564cc67cd6-8gdb9   | grep -i redirect
time="2019-10-16T06:22:03.080131701Z" level=info msg="backend redirection disabled" go.version=go1.12.8
Comment 4 errata-xmlrpc 2020-05-13 21:25:54 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0062