Bug 1845471 - exclude source redhat containers by default
Summary: exclude source redhat containers by default
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Repositories
Version: 6.7.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: 6.11.0
Assignee: Ian Ballou
QA Contact: Cole Higgins
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-06-09 10:30 UTC by Ina Panova
Modified: 2022-07-05 14:28 UTC (History)
10 users (show)

Fixed In Version: tfm-rubygem-katello-4.3.0.7-1
Doc Type: Enhancement
Doc Text:
Feature: Include and exclude tags during docker repo syncing rather than only include. Also, exclude source tags by default. Reason: Source tags cannot be excluded without enabling users to exclude docker tags. Result: In the UI and API, users can now select "include tags" for which tags to only include (same as Limit Sync Tags before), and "exclude tags" for which tags to only exclude.
Clone Of:
Environment:
Last Closed: 2022-07-05 14:28:21 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 34398 0 Normal Closed exclude source redhat containers by default 2022-02-11 20:29:30 UTC
Red Hat Product Errata RHSA-2022:5498 0 None None None 2022-07-05 14:28:32 UTC

Description Ina Panova 2020-06-09 10:30:13 UTC
Description of problem:
Once source container are enabled, they will be included as regular types of the images in the repositories.
Source container images are quite big, they cannot be pulled( podman docker pull will fail) and run.
Only with skopeo copy command those containers can be installed.

Satellite Registry won't have an issue to mirror down such content, however the sync time might be much longer due to the fact that source container images are quite large. This might decrease customer experience.

Solution: add an option to opt out of mirroring source container images.

Every source container will be tagged with the following convention:

Source container images are named based on the binary containers they represent. For example, for a particular standard RHEL UBI 8 container registry.access.redhat.com/ubi8:8.1-397 append -source to get the source container image (registry.access.redhat.com/ubi8:8.1-397-source).     

We already have a whitelist option, adjust the code so it can handle regular expressions and a negation of the search pattern can be used.

Version-Release number of selected component (if applicable):
6.7

How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 pulp-infra@redhat.com 2020-06-09 11:03:18 UTC
The Pulp upstream bug status is at NEW. Updating the external tracker on this bug.

Comment 2 pulp-infra@redhat.com 2020-06-09 11:03:20 UTC
The Pulp upstream bug priority is at Normal. Updating the external tracker on this bug.

Comment 3 Tanya Tereshchenko 2021-06-04 20:13:18 UTC
This RFE is not on the roadmap in the short term, we will re-evaluate it in a few months.

Comment 4 Mike McCune 2021-07-13 21:54:48 UTC
Upon review of our valid but aging backlog the Satellite Team has concluded that this Bugzilla does not meet the criteria for a resolution in the near term, and are planning to close in a month. This message may be a repeat of a previous update and the bug is again being considered to be closed. If you have any concerns about this, please contact your Red Hat Account team.  Thank you.

Comment 5 Mike McCune 2021-08-10 21:34:00 UTC
Thank you for your interest in Red Hat Satellite. We have evaluated this request, and while we recognize that it is a valid request, we do not expect this to be implemented in the product in the foreseeable future. This is due to other priorities for the product, and not a reflection on the request itself. We are therefore closing this out as WONTFIX. If you have any concerns about this feel free to contact your Red Hat Account Team. Thank you.

Comment 6 Justin Sherrill 2022-01-07 14:16:35 UTC
reopening this as its a simple thing to do.  We are simply going to prepopulate the exclude list with '*-source' upon new docker repo creation.

Comment 9 Ian Ballou 2022-02-04 16:26:08 UTC
Created redmine issue https://projects.theforeman.org/issues/34398 from this bug

Comment 13 jcallaha 2022-04-28 19:53:55 UTC
Verified in Satellite 6.11 Snap 18

Steps:
1. create a new product/repository
2. select docker from the content type dropdown
3. Observe the contents of the "Exclude tags" field

Result:
With the simpler solution mentioned in #6, we can see that *-source is the default value in the "Excluded Tags" field when creating a new docker repository. A user would have to consciously override this default to recreate the problem described in this bug.

See attached screenshot

Comment 18 errata-xmlrpc 2022-07-05 14:28:21 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: Satellite 6.11 Release), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:5498


Note You need to log in before you can comment on or make changes to this bug.