Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 2036191

Summary: oc tool is not compatible with setup of multiple credentials for a single registry which can be distinguished by their path
Product: OpenShift Container Platform Reporter: Andreas Karis <akaris>
Component: ocAssignee: Maciej Szulik <maszulik>
Status: CLOSED NOTABUG QA Contact: zhou ying <yinzhou>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 4.10CC: aos-bugs, jokerman, mfojtik
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-12-30 11:25:50 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Andreas Karis 2021-12-30 10:40:02 UTC 
Description of problem:

The containers-auth spec mentions a way to setup multiple credentials for a single registry which can be distinguished by their path:
https://github.com/containers/image/blob/main/docs/containers-auth.json.5.md

While podman works perfectly with such a setup, the `oc adm release new` subcommand fails miserably at it and I have to make the repository public to make this work:

~~~
$ cat ~/.docker/config.json  | sed 's/"auth": ".*"/"auth":"xyz"/g'
{
  "auths": {
    "quay.io/akaris/origin-release": {
      "auth": "(...)==",
      "email": ""
    },
    "quay.io/akaris/machine-config-operator": {
      "auth": "(...)==",
      "email": ""
    },
    "registry.ci.openshift.org": {
      "auth":"xyz"
    },
    "cloud.openshift.com": {
      "auth":"xyz",
      "email": "akaris"
    },
    "quay.io": {
      "auth":"xyz",
      "email": "akaris"
    },
    "registry.connect.redhat.com": {
      "auth":"xyz",
      "email": "akaris"
    },
    "registry.redhat.io": {
      "auth":"xyz",
      "email": "akaris"
    }
  }
}
~~~

~~~
[akaris@linux machine-config-operator (release-4.10-metric-50)]$ oc adm release new -n origin \
--from-release="registry.ci.openshift.org/ocp/release:4.10.0-0.nightly-2021-12-21-130047" \
--to-image quay.io/akaris/origin-release:v4.10-metric-50 \
machine-config-operator=quay.io/akaris/machine-config-operator:v4.10-metric-50
info: Found 160 images in release
info: Loading sha256:28b0067a9891725da4aff36e398f515b390e5d93be8a6863f6cb0d98f6dbbeef aws-machine-controllers
info: Loading sha256:3d81d3b3ae457302436c98a1e27e326021c461197f2282542a79babcf91e8145 azure-machine-controllers
info: Loading sha256:ffd45c5893942cdcd49316ec816709fff014b50ba415f1f050bd4cb3a547a4e9 baremetal-operator
info: Loading sha256:bb3b5ba691cbf6523b418fed4a1b675191836e4b04a927e26edb3dfae2a2f787 cloud-credential-operator
info: Loading sha256:35215753a9ba3bd6413bb7a7aad802e232611770563f522257e8974b6820112e cluster-api
info: Loading sha256:c16066fb52ce7d0e213d6f08d1542c7b86d1db64aaac5231f7f56d7c65c3e835 cluster-authentication-operator
info: Loading sha256:776820e37be4fedcbd42153a44a977a797a67a606b92fe06c83097a9b36cafc1 cluster-autoscaler-operator
info: Loading sha256:b8b2d99933048d7e2e5c3b1709ce868a30a8d02d420f1ddce5e5096356f3dcbb cluster-baremetal-operator
info: Loading sha256:ce685a8056849aac35d9b3f731b5b346dc7f4167774c0eb452e9a78dedd78569 cluster-bootstrap
info: Loading sha256:c920b44b4afea52d38a94e3c41abdc198e77b3be4a9634c6b98739d1398a03bd cluster-capi-operator
info: Loading sha256:888bb297e0141577656dec81aa4072fab187920735016c08d20a2e823e1527f6 cluster-cloud-controller-manager-operator
info: Loading sha256:eee19dee6d6b31855348762d92fce53f752f2cf29cddf7ebac4a623f80149554 cluster-config-operator
info: Loading sha256:60e04db3061975e223d348734a9fbd4ee11bfdc458ab22628f8837531ec4484d cluster-csi-snapshot-controller-operator
info: Loading sha256:8587411453c713dff344f848980143bbcc8f2ade3badda2814eb6af7bcaf679d cluster-dns-operator
info: Loading sha256:bae758577a132eaf81f6c2313b77bec7dd5cb95503b3bc117706006c6a8d2363 cluster-etcd-operator
info: Loading sha256:f4dd371f5169667b54c1d10dfce07faedb212fdf6a74cdc523a70990b2fdd11e cluster-image-registry-operator
info: Loading sha256:93056d3839021456203801e55d4ce1eb829f35d150e5036aef7e2b638b48e109 cluster-ingress-operator
info: Loading sha256:88fe780eb80876a52f65777075d7a80df7a9e2b50376db83b78486d8acfe76bf cluster-kube-apiserver-operator
info: Loading sha256:bfe4f06f159ec4eafc475d83da3a8c612f1b792f9b9d9f6b69a8b5a878eb2e64 cluster-kube-controller-manager-operator
info: Loading sha256:b108e57b59b33e6209acf085c0ccd6f84b592b9f34b813befaa29db30bd0bc59 cluster-kube-scheduler-operator
info: Loading sha256:86994030fcbfced8113d51e17ef28e5991ba93abd614101863b0a579479179a4 cluster-kube-storage-version-migrator-operator
info: Loading sha256:9c35918078c676ecff6f3dcf98073c93417d3685853b48d73bd64782a8207381 cluster-machine-approver
info: Loading sha256:551bb96c283e699accb6a58b9eb258fe445f67e74a2a456ae3fc3d367c0baa81 cluster-monitoring-operator
info: Loading sha256:eb25f6c7a5c4047adb2deb491c323eaddfcf5cff547225447f09ffef0efff0ad cluster-network-operator
info: Loading sha256:3bfb258b550e35583ef4c8b759917e20989cfdad07dd44a7e8e4057205829ea7 cluster-node-tuning-operator
info: Loading sha256:62bfc38887986f0cdd6bc344dbf5600404a3042a1579c4e469a8d090d9b3398e cluster-openshift-apiserver-operator
info: Loading sha256:250f9b70ee17ea09190c8a0478dbac214ff4a6d61bb2a05a608e2ceb1673fa92 cluster-openshift-controller-manager-operator
info: Loading sha256:323a711ce500875b0c7760f9ae640f38373ddd46922dbbd77b9802af9b5f4701 cluster-samples-operator
info: Loading sha256:da86854bcf8560f4a1c630ce113d5321b00877be13ce5e71ed9d0df85ff5bad1 cluster-storage-operator
info: Loading sha256:5f18addcaf84caf60ef2b486e28538e26dd6134284f4eb091e4d761214ee33b0 cluster-update-keys
info: Loading sha256:3c211ee0005cef79168db6488e48cc99a38f10c87d8b1b3612231d96ffdd299c console-operator
info: Loading sha256:7eb20f03c406b0df8e99ba9aa6b77bfd64bdf6739248a6b94c232f723a6f99f6 driver-toolkit
info: Loading sha256:1b28b5d342397b998e70d8278bd35215567ac7c2588739da8da8b3e3b87462eb insights-operator
info: Loading sha256:35445c6e74b53ac68546b6c4a72370d2fa73ed7385b5eae2d3b11b3da4db3fab installer
info: Loading sha256:9c15f352c5ccdeaeaf6ad3eb06598dfd42ec218a8e59a76e8bd6b6111abaef6d installer-artifacts
info: Loading sha256:6cc4fca42f016a0cf5e4ad9eddb85c21ab8fc8fb907458378e1e31659ac71f36 ironic-hardware-inventory-recorder
info: Loading sha256:afdb4b49d1a66b7732f18d363ef28c11283b16f6d840b3f2930242625c9761c6 machine-api-operator
error: unable to read image quay.io/akaris/machine-config-operator:v4.10-metric-50: unauthorized: access to the requested resource is not authorized
~~~

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:
Comment 1 Andreas Karis 2021-12-30 10:41:12 UTC 
Is this somehow related to https://bugzilla.redhat.com/show_bug.cgi?id=1872705 , https://issues.redhat.com/browse/IR-102 ?
Comment 2 Andreas Karis 2021-12-30 11:05:05 UTC 
It turns out that this also fails during cluster deployment. Is it possible that the relatively recent patch https://github.com/containers/image/commit/2cafc0105c89b1c569f68733f7a5eaf6e326831b has not made it into our tools, yet, but will eventually?
Comment 3 Andreas Karis 2021-12-30 11:25:50 UTC 
I'm closing this out because of stupidity ...
~~~
[akaris@linux ipi-us-west-2]$ oc version
Client Version: 4.9.11
The connection to the server api.akarisa53214.focused-solutions.support:6443 was refused - did you specify the right host or port?
~~~

This landed with: https://github.com/containers/image/commit/2cafc0105c89b1c569f68733f7a5eaf6e326831b .

And the dependency is in the 4.10 oc client and this will work starting with 4.10.