Comments (2)
Hi Frank,
I checked your cluster. It looks like the OLM setup ok. Community Operators should be deployed in the openshift-marketplace namespace.
[root@helper ~]# oc get olm -A
NAMESPACE NAME AGE
openshift-operator-lifecycle-manager operatorcondition.operators.coreos.com/packageserver 160m
NAMESPACE NAME AGE
olmconfig.operators.coreos.com/cluster 163m
NAMESPACE NAME AGE
openshift-monitoring operatorgroup.operators.coreos.com/openshift-cluster-monitoring 163m
openshift-operator-lifecycle-manager operatorgroup.operators.coreos.com/olm-operators 163m
openshift-operators operatorgroup.operators.coreos.com/global-operators 163m
NAMESPACE NAME DISPLAY TYPE PUBLISHER AGE
openshift-marketplace catalogsource.operators.coreos.com/certified-operators Certified Operators grpc Red Hat 159m
openshift-marketplace catalogsource.operators.coreos.com/community-operators Community Operators grpc Red Hat 159m
openshift-marketplace catalogsource.operators.coreos.com/redhat-marketplace Red Hat Marketplace grpc Red Hat 159m
openshift-marketplace catalogsource.operators.coreos.com/redhat-operators Red Hat Operators grpc Red Hat 159m
NAMESPACE NAME DISPLAY VERSION REPLACES PHASE
openshift-operator-lifecycle-manager clusterserviceversion.operators.coreos.com/packageserver Package Server 0.19.0 Succeeded
But during the resources check in the openshift-marketplace namespace I noticed about the "ImagePullBackOff" state of the pods.
[root@helper ~]# oc project openshift-marketplace
Now using project "openshift-marketplace" on server "https://api.ocp1.kvmlocal:6443".
[root@helper ~]# oc get all
NAME READY STATUS RESTARTS AGE
pod/certified-operators-g7xgr 0/1 ImagePullBackOff 0 165m
pod/certified-operators-gv6xs 0/1 ErrImagePull 0 154m
pod/community-operators-bb2sr 0/1 ImagePullBackOff 0 153m
pod/community-operators-tpzb7 0/1 ImagePullBackOff 0 165m
pod/marketplace-operator-68ddcd9c6-57m7v 1/1 Running 1 (158m ago) 169m
pod/redhat-marketplace-4mf5l 0/1 ImagePullBackOff 0 153m
pod/redhat-marketplace-hvfzz 0/1 ImagePullBackOff 0 165m
pod/redhat-operators-7q4p7 0/1 ImagePullBackOff 0 165m
pod/redhat-operators-bd4dc 0/1 ImagePullBackOff 0 154m
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
service/certified-operators ClusterIP 172.30.144.63 <none> 50051/TCP 165m
service/community-operators ClusterIP 172.30.194.181 <none> 50051/TCP 165m
service/marketplace-operator-metrics ClusterIP 172.30.62.173 <none> 8383/TCP,8081/TCP 169m
service/redhat-marketplace ClusterIP 172.30.2.123 <none> 50051/TCP 165m
service/redhat-operators ClusterIP 172.30.38.189 <none> 50051/TCP 165m
NAME READY UP-TO-DATE AVAILABLE AGE
deployment.apps/marketplace-operator 1/1 1 1 169m
NAME DESIRED CURRENT READY AGE
replicaset.apps/marketplace-operator-68ddcd9c6 1 1 1 169m
[root@helper ~]# oc get pod/community-operators-tpzb7 -o jsonpath='{}' | jq '.status.phase'
"Pending"
[root@helper ~]# oc get pod/community-operators-tpzb7 -o jsonpath='{}' | jq '.status.containerStatuses[]'
{
"image": "registry.redhat.io/redhat/community-operator-index:v4.11",
"imageID": "",
"lastState": {},
"name": "registry-server",
"ready": false,
"restartCount": 0,
"started": false,
"state": {
"waiting": {
"message": "Back-off pulling image \"registry.redhat.io/redhat/community-operator-index:v4.11\"",
"reason": "ImagePullBackOff"
}
}
}
[root@helper ~]# oc get event --field-selector involvedObject.name=community-operators-tpzb7,involvedObject.kind=Pod
LAST SEEN TYPE REASON OBJECT MESSAGE
3h7m Normal Scheduled pod/community-operators-tpzb7 Successfully assigned openshift-marketplace/community-operators-tpzb7 to master2.ocp1.kvmlocal by bootstrap.ocp1.kvmlocal
3h7m Normal AddedInterface pod/community-operators-tpzb7 Add eth0 [10.254.1.15/24] from openshift-sdn
3h6m Normal Pulling pod/community-operators-tpzb7 Pulling image "registry.redhat.io/redhat/community-operator-index:v4.11"
3h6m Warning Failed pod/community-operators-tpzb7 Failed to pull image "registry.redhat.io/redhat/community-operator-index:v4.11": rpc error: code = Unknown desc = unable to retrieve auth token: invalid username/password: unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: https://access.redhat.com/articles/3399531
3h6m Warning Failed pod/community-operators-tpzb7 Error: ErrImagePull
2m36s Normal BackOff pod/community-operators-tpzb7 Back-off pulling image "registry.redhat.io/redhat/community-operator-index:v4.11"
167m Warning Failed pod/community-operators-tpzb7 Error: ImagePullBackOff
As you can see, in the event message above, the reason for the ErrImagePull: "invalid username/password for registry.redhat.io".
I was able to pull "registry.redhat.io/redhat/community-operator-index:v4.11" manually, using my RedHat account credentials on your mashine.
[root@helper ~]# podman login registry.redhat.io
Username: hwassman
Password:
Login Succeeded!
[root@helper ~]# podman pull registry.redhat.io/redhat/community-operator-index:v4.11
Trying to pull registry.redhat.io/redhat/community-operator-index:v4.11...
Getting image source signatures
Checking if image destination supports signatures
Copying blob 2e9427b8c823 done
Copying blob d2da84f6e5b7 done
Copying blob 8e4de45042fd done
Copying blob 9136ac53452b done
Copying blob 05cd33a1bc38 done
Copying blob f25cf9b7681c done
Copying config ab1f1426fc done
Writing manifest to image destination
Storing signatures
ab1f1426fc5bc6f07eaa749f88a8bacf6c4982a2715f08180421ca2d56106450
Unfortunately, this did not solve ErrImagePull error by community-operator pod deployment, since the global pull secret still have invalid authentication credentials for "registry.redhat.io"
[root@helper ~]# oc get secret/pull-secret -n openshift-config -ojson | jq -r '.data[".dockerconfigjson"]' | base64 -d - | jq '.auths | with_entries(select(.key |contains("redhat")))'
{
"registry.connect.redhat.com": {
"auth": "NTMwMzU2MTl8dWhjLTFVdXY2RGVvU0oxM0lqelJ4YVlQUEtOclI0dTpleUpoYkdjaU9pSlNVelV4TWlKOS5leUp6ZFdJaU9pSXpNbU5rWm1JNU9HUmpOemcwTWpZeFlXUXhPR1E1T1RKa09EWXhaalpoTUNKOS5adGtxQjc4cEEyUmoxOHVzVWZGYmtVOXBQLW5XTU9aUW9...2RBSVJTcw==",
"email": "[email protected]"
},
"registry.redhat.io": {
"auth": "NTMwMzU2MTl8dWhjLTFVdXY2RGVvU0oxM0lqelJ4YVlQUEtOclI0dTpleUpoYkdjaU9pSlNVelV4TWlKOS5leUp6ZFdJaU9pSXpNbU5rWm1JNU9HUmpOemcwTWpZeFlXUXhPR1E1T1RKa09EWXhaalpoTUNKOS5adGtxQjc4cEEyUmoxOHVzVWZGYmtVOXBQLW5XTU9aUW9...2RBSVJTcw==",
"email": "[email protected]"
}
}
I think you should change the existing global pull secret for redhat registry on your machine, using valid user/password account credentials. Check the following articles:
https://access.redhat.com/RegistryAuthentication#creating-registry-service-accounts-6
https://access.redhat.com/solutions/4902871
from ibm-spectrum-scale-bridge-for-grafana.
Hi Frank,
I was able to solve this issue on my VM Openshift cluster. Here the steps I did.
-
Download your personal redhat pull-secret from https://console.redhat.com/openshift/install/pull-secret
and store the pull-secret file on your ocp, f.e. /home/pull-secret -
Update the global cluster pull secret from the pull-secret file
[root@ocp1-helper ~]# oc set data secret/pull-secret -n openshift-config --from-file=.dockerconfigjson=/home/pull-secret
- Switch to openshift-marketplace namespace and check the state of the community-operators pods
[root@ocp1-helper ~]# oc project openshift-marketplace
Now using project "openshift-marketplace" on server "https://api.ocp1.vmlocal:6443".
[root@ocp1-helper ~]# oc get all
NAME READY STATUS RESTARTS AGE
pod/certified-operators-56lhz 0/1 ImagePullBackOff 0 12h
pod/certified-operators-ml7dw 0/1 ImagePullBackOff 0 12h
pod/community-operators-5cxb8 0/1 ImagePullBackOff 0 12h
pod/community-operators-pvvb9 0/1 ImagePullBackOff 0 12h
pod/marketplace-operator-66f6dbb69c-wgjbv 1/1 Running 1 (12h ago) 13h
pod/redhat-marketplace-999zz 0/1 ImagePullBackOff 0 12h
...
- If the pods still stay in ImagePullBackOff mode, delete them. New pods will be created by using updated pull-secret
[root@ocp1-helper ~]# oc get po
NAME READY STATUS RESTARTS AGE
pod/certified-operators-ml7dw 1/1 Running 0 13h
pod/community-operators-8bg62 1/1 Running 0 35s
pod/marketplace-operator-66f6dbb69c-wgjbv 1/1 Running 1 (12h ago) 13h
pod/redhat-marketplace-jlc58 1/1 Running 0 13h
pod/redhat-operators-2m8pm 1/1 Running 0 12h
...
- Now the community operators should be available on your ocp. You can check it via openshift web console
from ibm-spectrum-scale-bridge-for-grafana.
Related Issues (20)
- Error starting grafana bridge v7.1.0 HOT 1
- Wiki references wrong file HOT 2
- SERVER default not working in container HOT 1
- Fix code scanning alert - Clear-text logging of sensitive information
- How works Prometheus Integration ? HOT 7
- ZimonGrafana Bridge don't start on rhel8.8 with python3.8 installed HOT 1
- Add Basic Auth support to Prometheus Brigde HOT 3
- Create a collection of grafana dashboards based on Prometheus Bridge
- Mount a volume with the mmsdrfs/ZIMonsensors.cfg file HOT 2
- Issue with gpfs_filesetquota metrics collect HOT 8
- Update UBI image to 9.3-1610 HOT 1
- cannot get metadata from pmcollector HOT 8
- Fix code scanning alert - Clear-text logging of sensitive information
- GrafanaBridge has no systemd unit files shipped
- Multi pmcollector setup HOT 3
- K8S deploy failure HOT 2
- zimonGrafana issue with V8.0 and Python 3.11 HOT 5
- new dashboard for ESS NVME and Hybrid models
- No sensor configuration data parsed HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ibm-spectrum-scale-bridge-for-grafana.