Bug 2072879 - Error with oc-mirror using an old outdated unsupported oc client in AI
Summary: Error with oc-mirror using an old outdated unsupported oc client in AI
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Advanced Cluster Management for Kubernetes
Classification: Red Hat
Component: Infrastructure Operator
Version: rhacm-2.5
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: ---
: rhacm-2.5
Assignee: Eran Cohen
QA Contact: Chad Crum
Derek
URL:
Whiteboard:
Depends On: 2069976
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-04-07 08:01 UTC by OpenShift BugZilla Robot
Modified: 2022-10-03 20:22 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-10-03 20:22:34 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github stolostron backlog issues 21512 0 None None None 2022-04-07 12:06:56 UTC
Red Hat Issue Tracker MGMTBUGSM-364 0 None None None 2022-04-24 17:19:00 UTC

Comment 3 Chad Crum 2022-05-05 18:23:10 UTC
Validated fix using MCE ds snapshot 2.0.0-DOWNANDBACK-2022-05-04-15-49-55

Validated both `oc adm release mirror` and `oc-mirror` method of mirroring ocp releases is working (Deployed spoke node from each successfully)

############################
# oc-mirror validation steps
############################
## Mirrored latest stable 4.10 release using latest oc-mirror (built from master source)

(1) Create imageset for oc-mirror
  cat /root/oc-mirror_working/oc-mirror/imageset.yml 
  apiVersion: mirror.openshift.io/v1alpha2
  kind: ImageSetConfiguration
  mirror:
    platform:
	  channels:
	    - name: stable-4.10

(2) Mirror release to local registry with oc-mirror
  ./bin/oc-mirror --dir=/var/tmp/build  --config imageset.yml  --dest-skip-tls docker://registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest

(3) Apply oc-mirror generated icsp (example is below)
  cat imageContentSourcePolicy.yaml 
  ---
  apiVersion: operator.openshift.io/v1alpha1
  kind: ImageContentSourcePolicy
  metadata:
    name: release-0
  spec:
    repositoryDigestMirrors:
    - mirrors:
      - registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release-images
      source: quay.io/openshift-release-dev/ocp-release
    - mirrors:
      - registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release
      source: quay.io/openshift-release-dev/ocp-v4.0-art-dev

(4) Update 4.10 clusterimageset to use mirrored release (release url is displayed in oc-mirror output )
  registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release-images:4.10.11-x86_64

(5) Remove image-policy-0 icsp if it exists as it will conflict

(6) Edit assisted service mirror-registry configmap
  - Remove entries that match image-policy-0 
  - Add entries that match oc-mirror generated icsp

(7) Delete assisted-service pod to recreate it (Possibly not necessary)

(8) Deployed spoke cluster successfully using 4.10 clusterimageset (or whichever clusterimageset contains the oc-mirror mirrored release)


(9) Also confirmed -
  # Assisted internal oc adm release info can return a correct release payload image
  [root@sealusa11 ~]# oc get clusterimageset                                                                                                                                                                                                                                      
  NAME   RELEASE                                                                                                                                                                                                                                                                  
  4.10   registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release-images:4.10.11-
                                                                                                                                                          
  [root@sealusa11 ~]# oc rsh assisted-service-66bfdf6785-9h5pv                                                                                                                                                                                                                    
    Defaulted container "assisted-service" out of: assisted-service, postgres                                                                                                                                                                                                       
    sh-4.4$ oc adm release info --image-for=machine-config-operator registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release-images:4.10.11-x86_64                                                                                                      

  registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release@sha256:8e98944cb0a7fe849f310964aadac4c06afb577dd87ce62d0b609102a32ff05b


  # Release payload image can be pulled with podman
  podman pull registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release@sha256:8e98944cb0a7fe849f310964aadac4c06afb577dd87ce62d0b609102a32ff05b
  Trying to pull registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release@sha256:8e98944cb0a7fe849f310964aadac4c06afb577dd87ce62d0b609102a32ff05b...
  Getting image source signatures
  Copying blob 39382676eb30 done
  Copying blob 9ef334919d82 [==================>-------------------] 8.4MiB / 16.5MiB
  Copying blob 237bfbffb5f2 [===>----------------------------------] 8.3MiB / 79.5MiB


Note You need to log in before you can comment on or make changes to this bug.