Bug 1931857 - ServiceAccount Registry Authfiles Do Not Contain Entries for Public Hostnames
Summary: ServiceAccount Registry Authfiles Do Not Contain Entries for Public Hostnames
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Image Registry
Version: 4.1.z
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 4.6.z
Assignee: Ricardo Maraschini
QA Contact: Wenjing Zheng
URL:
Whiteboard:
Depends On: 1931856
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-02-23 12:11 UTC by OpenShift BugZilla Robot
Modified: 2021-04-20 19:27 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: Automatically created docker config secret does not include credentials for integrated internal registry routes. Consequence: As no credentials were present for accessing the registry through any of its routes pods attempting to reach the registry were failing due to lack of authentication. Fix: Include all configured registry routes to the default docker credential secret. Result: Now pods can reach the integrated registry by any of its routes as credentials now contain an entry for each route.
Clone Of:
Environment:
Last Closed: 2021-04-20 19:27:19 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift cluster-openshift-controller-manager-operator pull 200 0 None open [release-4.6] Bug 1931857: Set registry routes in operand config 2021-03-26 01:00:29 UTC
Red Hat Product Errata RHBA-2021:1153 0 None None None 2021-04-20 19:27:38 UTC

Comment 5 Wenjing Zheng 2021-03-30 05:58:15 UTC
Verified as below:
$ oc extract secrets/default-dockercfg-bdlxm --to=- | jq 'keys'
# .dockercfg
[
  "172.30.132.199:5000",
  "image-registry.openshift-image-registry.svc.cluster.local:5000",
  "image-registry.openshift-image-registry.svc:5000"
]
$ oc get clusterversion
NAME      VERSION                             AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.6.0-0.nightly-2021-03-27-052141   True        False         4h58m   Cluster version is 4.6.0-0.nightly-2021-03-27-052141

Comment 10 errata-xmlrpc 2021-04-20 19:27:19 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.6.25 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:1153


Note You need to log in before you can comment on or make changes to this bug.