search

openshift-metal3 / dev-scripts

Scripts to automate development/test setup for openshift integration with https://github.com/metal3-io/
Apache License 2.0
93 stars 184 forks source link

ImageStreams imports fail due to unauthorized access to registry.redhat.io #431

Closed mcornea closed 5 years ago

mcornea commented 5 years ago

Describe the bug Deploying cakephp-mysql-example template fails because imagestreams builds fail due to unauthorized access registry.redhat.io.

To Reproduce Run make. oc new-app --template=cakephp-mysql-example

Expected/observed behavior Observed behavior:

[centos@provisionhost-0 dev-scripts]$ oc status
In project marius on server https://api.ostest.test.metalkube.org:6443

http://cakephp-mysql-example-marius.apps.ostest.test.metalkube.org (svc/cakephp-mysql-example)
  dc/cakephp-mysql-example deploys istag/cakephp-mysql-example:latest <-
    bc/cakephp-mysql-example source builds https://github.com/sclorg/cakephp-ex.git on openshift/php:7.1 
      not built yet
    deployment #1 waiting on image or update

svc/mysql - 172.30.185.61:3306
  dc/mysql deploys openshift/mysql:5.7 
    deployment #1 waiting on image or update

2 warnings identified, use 'oc status --suggest' to see details.

[centos@provisionhost-0 dev-scripts]$ oc get events
LAST SEEN   TYPE      REASON                         OBJECT                              MESSAGE
2m3s        Warning   BuildConfigInstantiateFailed   buildconfig/cakephp-mysql-example   error instantiating Build from BuildConfig marius/cakephp-mysql-example (0): Error resolving ImageStreamTag php:7.1 in namespace openshift: unable to find latest tagged image

[centos@provisionhost-0 dev-scripts]$ oc describe is/php -n openshift
Name:           php
Namespace:      openshift
Created:        38 minutes ago
Labels:         samples.operator.openshift.io/managed=true
Annotations:        openshift.io/display-name=PHP
            openshift.io/image.dockerRepositoryCheck=2019-04-23T22:21:24Z
            samples.operator.openshift.io/version=4.0.0-0.ci-2019-04-17-133604
Image Repository:   image-registry.openshift-image-registry.svc:5000/openshift/php
Image Lookup:       local=false
Unique Images:      0
Tags:           6

7.2 (latest)
  tagged from registry.redhat.io/rhscl/php-72-rhel7:latest
    prefer registry pullthrough when referencing this tag

  Build and run PHP 7.2 applications on RHEL 7. For more information about using this builder image, including OpenShift considerations, see https://github.com/sclorg/s2i-php-container/blob/master/7.2/README.md.
  Tags: builder, php
  Supports: php:7.2, php
  Example Repo: https://github.com/sclorg/cakephp-ex.git

  ! error: Import failed (InternalError): Internal error occurred: Get https://registry.redhat.io/v2/rhscl/php-72-rhel7/manifests/latest: unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: https://access.redhat.com/articles/3399531
      38 minutes ago

7.1
  tagged from registry.redhat.io/rhscl/php-71-rhel7:latest
    prefer registry pullthrough when referencing this tag

  Build and run PHP 7.1 applications on RHEL 7. For more information about using this builder image, including OpenShift considerations, see https://github.com/sclorg/s2i-php-container/blob/master/7.1/README.md.
  Tags: builder, php
  Supports: php:7.1, php
  Example Repo: https://github.com/sclorg/cakephp-ex.git

  ! error: Import failed (InternalError): Internal error occurred: Get https://registry.redhat.io/v2/rhscl/php-71-rhel7/manifests/latest: unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: https://access.redhat.com/articles/3399531
      38 minutes ago

7.0
  tagged from registry.redhat.io/rhscl/php-70-rhel7:latest
    prefer registry pullthrough when referencing this tag

  Build and run PHP 7.0 applications on RHEL 7. For more information about using this builder image, including OpenShift considerations, see https://github.com/sclorg/s2i-php-container/blob/master/7.0/README.md.
  Tags: builder, php
  Supports: php:7.0, php
  Example Repo: https://github.com/sclorg/cakephp-ex.git

  ! error: Import failed (InternalError): Internal error occurred: Get https://registry.redhat.io/v2/rhscl/php-70-rhel7/manifests/latest: unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: https://access.redhat.com/articles/3399531
      38 minutes ago

5.6
  tagged from registry.redhat.io/rhscl/php-56-rhel7:latest
    prefer registry pullthrough when referencing this tag

  Build and run PHP 5.6 applications on RHEL 7. For more information about using this builder image, including OpenShift considerations, see https://github.com/sclorg/s2i-php-container/blob/master/5.6/README.md.
  Tags: hidden, builder, php
  Supports: php:5.6, php
  Example Repo: https://github.com/sclorg/cakephp-ex.git

  ! error: Import failed (InternalError): Internal error occurred: Get https://registry.redhat.io/v2/rhscl/php-56-rhel7/manifests/latest: unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: https://access.redhat.com/articles/3399531
      38 minutes ago

5.5
  tagged from registry.redhat.io/openshift3/php-55-rhel7:latest
    prefer registry pullthrough when referencing this tag

  Build and run PHP 5.5 applications on RHEL 7. For more information about using this builder image, including OpenShift considerations, see https://github.com/sclorg/s2i-php-container/blob/master/5.5/README.md.
  Tags: hidden, builder, php
  Supports: php:5.5, php
  Example Repo: https://github.com/sclorg/cakephp-ex.git

  ! error: Import failed (InternalError): Internal error occurred: Get https://registry.redhat.io/v2/openshift3/php-55-rhel7/manifests/latest: unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: https://access.redhat.com/articles/3399531
      38 minutes ago

Expected behavior: We should be able to use the predefined ImageStreams out of the box. I guess we need a way to pass credentials for registry.redhat.io as input to the installer.

russellb commented 5 years ago

@mcornea get a pull secret from cloud.openshift.com. This should be included. Reopen if you still have a problem after including that pull secret in your deployments.