Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1964084

Summary: OpenShift-ansible playbook tries to pull image from 'registry.access.redhat.com' in a disconnected env.
Product: OpenShift Container Platform Reporter: Apoorva Jagtap <apjagtap>
Component: InstallerAssignee: Russell Teague <rteague>
Installer sub component: openshift-ansible QA Contact: Gaoyun Pei <gpei>
Status: CLOSED ERRATA Docs Contact:
Severity: medium    
Priority: medium CC: aos-bugs, fspolti, jialiu, jokerman, mstaeble, rmonk
Version: 3.11.0   
Target Milestone: ---   
Target Release: 3.11.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-07-07 11:01:35 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 2 Russell Teague 2021-06-01 16:05:12 UTC
Since the image streams have both 'registry.redhat.io' and 'registry.access.redhat.com', the playbook [1] should be updated to handle both.  However, this PR [2] updated some imagestreams to use the older host, so these imagestreams should probably be fixed.

[1] https://github.com/openshift/openshift-ansible/blob/b107c2ef25b9514fa1fe3d392c04a5a844d7fd42/roles/openshift_examples/tasks/stream_secrets.yml#L31-L47
[2] https://github.com/openshift/openshift-ansible/pull/12308

Comment 3 Russell Teague 2021-06-01 19:04:10 UTC
fspolti,
Could you provide some insight as to why the registry host was changed [1] to 'registry.access.redhat.com' for dotnet_imagestreams.json and dotnet_imagestreams_centos.json?

[1] https://github.com/openshift/openshift-ansible/pull/12308

Comment 8 Johnny Liu 2021-07-03 11:54:00 UTC
Verified this bug with , and PASS.

1. Install a cluster with openshift-ansible-3.11.462
2. Some dotnet IS is pointed to wrong registry - "registry.access.redhat.com"
[root@preserve-jialiu-ansible ~]# oc get is -n openshift dotnet-runtime -o json | jq -r '.spec.tags[].from'
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-21-runtime-rhel7:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-21-runtime-rhel7:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry.access.redhat.com/ubi8/dotnet-21-runtime:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-31-runtime-rhel7:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-31-runtime-rhel7:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry.access.redhat.com/ubi8/dotnet-31-runtime:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry.access.redhat.com/ubi8/dotnet-50-runtime:5.0"
}
{
  "kind": "DockerImage",
  "name": "registry.access.redhat.com/ubi8/dotnet-50-runtime:5.0"
}
{
  "kind": "ImageStreamTag",
  "name": "5.0-ubi8"
}

[root@preserve-jialiu-ansible ~]# oc get is -n openshift dotnet -o json | jq -r '.spec.tags[].from'
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-21-rhel7:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-21-rhel7:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry.access.redhat.com/ubi8/dotnet-21:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-31-rhel7:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-31-rhel7:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry.access.redhat.com/ubi8/dotnet-31:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry.access.redhat.com/ubi8/dotnet-50:5.0"
}
{
  "kind": "DockerImage",
  "name": "registry.access.redhat.com/ubi8/dotnet-50:5.0"
}
{
  "kind": "ImageStreamTag",
  "name": "5.0-ubi8"
}
3. Run upgrade with openshift-ansible-3.11.465-1.git.0.58ac570.el7.noarch.
4. Check IS again, now they are amended.

[root@preserve-jialiu-ansible ~]# oc get is -n openshift dotnet-runtime -o json | jq -r '.spec.tags[].from'
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-21-runtime-rhel7:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-21-runtime-rhel7:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/ubi8/dotnet-21-runtime:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-31-runtime-rhel7:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-31-runtime-rhel7:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/ubi8/dotnet-31-runtime:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/ubi8/dotnet-50-runtime:5.0"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/ubi8/dotnet-50-runtime:5.0"
}
{
  "kind": "ImageStreamTag",
  "name": "5.0-ubi8"
}

[root@preserve-jialiu-ansible ~]# oc get is -n openshift dotnet -o json | jq -r '.spec.tags[].from'
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-21-rhel7:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-21-rhel7:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/ubi8/dotnet-21:2.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-31-rhel7:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/dotnet/dotnet-31-rhel7:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/ubi8/dotnet-31:3.1"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/ubi8/dotnet-50:5.0"
}
{
  "kind": "DockerImage",
  "name": "registry-proxy.engineering.redhat.com/ubi8/dotnet-50:5.0"
}
{
  "kind": "ImageStreamTag",
  "name": "5.0-ubi8"
}

Comment 10 errata-xmlrpc 2021-07-07 11:01:35 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 3.11.465 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:2639