+++ This bug was initially created as a clone of Bug #1779351 +++ To better catch failures due to misbehaving or faulty registries, the verifying manifest service used by image and release tooling should verify outgoing manifests (as well as incoming manifests) by digest. This is acceptable now that we require schema2 container image registry support for our release tooling, and helps close another possible failure point by verifying what we send matches what the server tells us it gets.
Above library-go PR is not bumped into the latest oc client: [root@dhcp-140-138 Doc]# oc version -o yaml clientVersion: buildDate: "2019-12-20T11:26:44Z" compiler: gc gitCommit: 6a937dfe56ff26255d09702c69b8406040c14505 gitTreeState: clean gitVersion: v4.3.0 goVersion: go1.12.12 major: "" minor: "" platform: linux/amd64 [root@dhcp-140-138 oc]# git checkout -b 2019-12-20 6a937dfe56ff26255d09702c69b8406040c14505 Switched to a new branch '2019-12-20' [root@dhcp-140-138 library-go]# cd pkg/image/registryclient/ [root@dhcp-140-138 registryclient]# vi client.go ## check above library-go PR's diff files, the diff file not found in latest "6a937dfe56ff26255d09702c69b8406040c14505"
If we rebase oc before 4.3.0 that's fine, but we won't block the release on this. As such I'm targeting 4.3.z so we focus on getting out the door.
RF https://bugzilla.redhat.com/show_bug.cgi?id=1779351#c3, will verify it.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:0528