Validated fix using MCE ds snapshot 2.0.0-DOWNANDBACK-2022-05-04-15-49-55 Validated both `oc adm release mirror` and `oc-mirror` method of mirroring ocp releases is working (Deployed spoke node from each successfully) ############################ # oc-mirror validation steps ############################ ## Mirrored latest stable 4.10 release using latest oc-mirror (built from master source) (1) Create imageset for oc-mirror cat /root/oc-mirror_working/oc-mirror/imageset.yml apiVersion: mirror.openshift.io/v1alpha2 kind: ImageSetConfiguration mirror: platform: channels: - name: stable-4.10 (2) Mirror release to local registry with oc-mirror ./bin/oc-mirror --dir=/var/tmp/build --config imageset.yml --dest-skip-tls docker://registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest (3) Apply oc-mirror generated icsp (example is below) cat imageContentSourcePolicy.yaml --- apiVersion: operator.openshift.io/v1alpha1 kind: ImageContentSourcePolicy metadata: name: release-0 spec: repositoryDigestMirrors: - mirrors: - registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release-images source: quay.io/openshift-release-dev/ocp-release - mirrors: - registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release source: quay.io/openshift-release-dev/ocp-v4.0-art-dev (4) Update 4.10 clusterimageset to use mirrored release (release url is displayed in oc-mirror output ) registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release-images:4.10.11-x86_64 (5) Remove image-policy-0 icsp if it exists as it will conflict (6) Edit assisted service mirror-registry configmap - Remove entries that match image-policy-0 - Add entries that match oc-mirror generated icsp (7) Delete assisted-service pod to recreate it (Possibly not necessary) (8) Deployed spoke cluster successfully using 4.10 clusterimageset (or whichever clusterimageset contains the oc-mirror mirrored release) (9) Also confirmed - # Assisted internal oc adm release info can return a correct release payload image [root@sealusa11 ~]# oc get clusterimageset NAME RELEASE 4.10 registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release-images:4.10.11- [root@sealusa11 ~]# oc rsh assisted-service-66bfdf6785-9h5pv Defaulted container "assisted-service" out of: assisted-service, postgres sh-4.4$ oc adm release info --image-for=machine-config-operator registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release-images:4.10.11-x86_64 registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release@sha256:8e98944cb0a7fe849f310964aadac4c06afb577dd87ce62d0b609102a32ff05b # Release payload image can be pulled with podman podman pull registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release@sha256:8e98944cb0a7fe849f310964aadac4c06afb577dd87ce62d0b609102a32ff05b Trying to pull registry.ocp-edge-cluster-assisted-0.qe.lab.redhat.com:5000/latest/openshift/release@sha256:8e98944cb0a7fe849f310964aadac4c06afb577dd87ce62d0b609102a32ff05b... Getting image source signatures Copying blob 39382676eb30 done Copying blob 9ef334919d82 [==================>-------------------] 8.4MiB / 16.5MiB Copying blob 237bfbffb5f2 [===>----------------------------------] 8.3MiB / 79.5MiB