Document URL: https://docs.openshift.com/container-platform/4.5/operators/olm-restricted-networks.html#olm-restricted-networks-operatorhub_olm-restricted-networks Section Number and Name: Configuring OperatorHub for restricted networks -> Procedure -> pt. 2 Describe the issue: [--filter-by-os="<os>/<arch>"] parameter is described without warning that it will change manifestlist digest in the target registry for multi-arch images, thus breaking catalog consistency. Suggestions for improvement: Add a warning that one shouldn't use this parameter for mirroring the whole OLM catalog, since it will alter ManifestList and operator won't find baked sha256 digests. Additional information:
https://github.com/openshift/openshift-docs/pull/25653 QA review needed.
Hi Leonid, Sorry, could you help provide more details? Based on my understanding, the image digest depends on the arch/platfrom of the registry. That means, if you don't use the `--filter-by-os` flag, the image digest may be changed too. So, it's not related with this `--filter-by-os` flag. @Kevin, Correct me if I'm worng, thanks!
Hi, Jian, Kevin, and Leonid. I also just got assigned this bug (https://bugzilla.redhat.com/show_bug.cgi?id=1879877), which is related or may be a duplicate. Please advise as to how to proceed and also provide edits for the updated documentation. Thank you. - Jonquil Williams
Hi, Leonid. Please let me know if you can provide the details that Jian was asking. This is his original message: "Could you help provide more details? Based on my understanding, the image digest depends on the arch/platfrom of the registry. That means, if you don't use the `--filter-by-os` flag, the image digest may be changed too. So, it's not related with this `--filter-by-os` flag." My proposed changes to the doc are: CAUTION: Do not use `--filter-by-os` to mirror the entire OLM catalog because it changes the ManifestList digest in the target registry for multi-arch images and breaks the catalog consistency. Specifically, the Operator will not be able to find sha256 digests. But these changes have been rejected and Jian is asking for more information to correct this statement. Thank you, Jonquil
I never got SME feedback to satisfy QE for this BZ. But it looks like it has been addressed in this BZ instead: https://bugzilla.redhat.com/show_bug.cgi?id=1890951 Here is the current 4.5 published output: https://docs.openshift.com/container-platform/4.5/operators/admin/olm-restricted-networks.html#olm-restricted-networks-operatorhub_olm-restricted-networks I am closing this because I believe it is fixed.
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days