Bug 1822640 - ansible-runner-service.sh fails to pull rhceph/ansible-runner-rhel8
Summary: ansible-runner-service.sh fails to pull rhceph/ansible-runner-rhel8
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: Documentation
Version: 4.0
Hardware: Unspecified
OS: Unspecified
unspecified
urgent
Target Milestone: rc
: 4.1
Assignee: John Brier
QA Contact: Tejas
URL:
Whiteboard:
Depends On:
Blocks: 1809603
TreeView+ depends on / blocked
 
Reported: 2020-04-09 13:58 UTC by Eric Elena
Modified: 2020-06-11 12:12 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-06-11 12:12:06 UTC
Embargoed:


Attachments (Terms of Use)

Description Eric Elena 2020-04-09 13:58:18 UTC
Description of problem:
Following the steps to install ceph with the cockpit on RHEL 8.1 https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/4/html-single/installation_guide/index#install-and-configure-the-cockpit-ceph-installer_install
After a successful log in, running "sudo ansible-runner-service.sh -s" at step 3.3 fails to pull rhceph/ansible-runner-rhel8 because this container is only available on registry.redhat.io but this registry is not in the search list by default.


Version-Release number of selected component (if applicable):
Ceph4 on RHEL8.1 using Cockpit


How reproducible:
Follow https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/4/html-single/installation_guide/index to prepare an installation with the cockpit.


Actual results:
The script ansible-runner-service.sh at step 3.3 fails to pull a container
<...>
Fetching Ansible API container (runner-service). Please wait...
Trying to pull registry.access.redhat.com/rhceph/ansible-runner-rhel8:latest...
  unsupported: This repo requires terms acceptance and is only available on registry.redhat.io
Trying to pull registry.fedoraproject.org/rhceph/ansible-runner-rhel8:latest...
  manifest unknown: manifest unknown
Trying to pull registry.centos.org/rhceph/ansible-runner-rhel8:latest...
  manifest unknown: manifest unknown
Trying to pull docker.io/rhceph/ansible-runner-rhel8:latest...
  denied: requested access to the resource is denied
Error: error pulling image "rhceph/ansible-runner-rhel8:latest": unable to pull rhceph/ansible-runner-rhel8:latest: 4 errors occurred:
        * Error initializing source docker://registry.access.redhat.com/rhceph/ansible-runner-rhel8:latest: Error reading manifest latest in registry.access.redhat.com/rhceph/ansible-runner-rhel8: unsupported: T
his repo requires terms acceptance and is only available on registry.redhat.io
        * Error initializing source docker://registry.fedoraproject.org/rhceph/ansible-runner-rhel8:latest: Error reading manifest latest in registry.fedoraproject.org/rhceph/ansible-runner-rhel8: manifest unkno
wn: manifest unknown
        * Error initializing source docker://registry.centos.org/rhceph/ansible-runner-rhel8:latest: Error reading manifest latest in registry.centos.org/rhceph/ansible-runner-rhel8: manifest unknown: manifest u
nknown
        * Error initializing source docker://rhceph/ansible-runner-rhel8:latest: Error reading manifest latest in docker.io/rhceph/ansible-runner-rhel8: errors:
denied: requested access to the resource is denied
unauthorized: authentication required



Failed to fetch the container. Unable to continue



Expected results:
The script should be able to pull the container.


Additional info:
registry.redhat.io is missing in /etc/containers/registries.conf on RHEL 8.1. This is the default list on RHEL 8.1:
[registries.search]
registries = ['registry.access.redhat.com', 'registry.fedoraproject.org', 'registry.centos.org', 'docker.io']

It should be
[registries.search]
registries = ['registry.redhat.io', 'registry.access.redhat.com', 'registry.fedoraproject.org', 'registry.centos.org', 'docker.io']

Comment 2 Hemanth Kumar 2020-05-07 08:37:48 UTC
Verified the changes.


Note You need to log in before you can comment on or make changes to this bug.