Giter VIP home page Giter VIP logo

Comments (2)

Helene avatar Helene commented on June 23, 2024

Hi Frank,
I checked your cluster. It looks like the OLM setup ok. Community Operators should be deployed in the openshift-marketplace namespace.

[root@helper ~]# oc get olm -A
NAMESPACE                              NAME                                                   AGE
openshift-operator-lifecycle-manager   operatorcondition.operators.coreos.com/packageserver   160m

NAMESPACE   NAME                                     AGE
olmconfig.operators.coreos.com/cluster   163m

NAMESPACE                              NAME                                                              AGE
openshift-monitoring                   operatorgroup.operators.coreos.com/openshift-cluster-monitoring   163m
openshift-operator-lifecycle-manager   operatorgroup.operators.coreos.com/olm-operators                  163m
openshift-operators                    operatorgroup.operators.coreos.com/global-operators               163m

NAMESPACE               NAME                                                     DISPLAY               TYPE   PUBLISHER   AGE
openshift-marketplace   catalogsource.operators.coreos.com/certified-operators   Certified Operators   grpc   Red Hat     159m
openshift-marketplace   catalogsource.operators.coreos.com/community-operators   Community Operators   grpc   Red Hat     159m
openshift-marketplace   catalogsource.operators.coreos.com/redhat-marketplace    Red Hat Marketplace   grpc   Red Hat     159m
openshift-marketplace   catalogsource.operators.coreos.com/redhat-operators      Red Hat Operators     grpc   Red Hat     159m

NAMESPACE                              NAME                                                       DISPLAY          VERSION   REPLACES                                     PHASE
openshift-operator-lifecycle-manager   clusterserviceversion.operators.coreos.com/packageserver   Package Server   0.19.0                                                 Succeeded

But during the resources check in the openshift-marketplace namespace I noticed about the "ImagePullBackOff" state of the pods.

[root@helper ~]# oc project openshift-marketplace
Now using project "openshift-marketplace" on server "https://api.ocp1.kvmlocal:6443".

[root@helper ~]# oc get all
NAME                                       READY   STATUS             RESTARTS       AGE
pod/certified-operators-g7xgr              0/1     ImagePullBackOff   0              165m
pod/certified-operators-gv6xs              0/1     ErrImagePull       0              154m
pod/community-operators-bb2sr              0/1     ImagePullBackOff   0              153m
pod/community-operators-tpzb7              0/1     ImagePullBackOff   0              165m
pod/marketplace-operator-68ddcd9c6-57m7v   1/1     Running            1 (158m ago)   169m
pod/redhat-marketplace-4mf5l               0/1     ImagePullBackOff   0              153m
pod/redhat-marketplace-hvfzz               0/1     ImagePullBackOff   0              165m
pod/redhat-operators-7q4p7                 0/1     ImagePullBackOff   0              165m
pod/redhat-operators-bd4dc                 0/1     ImagePullBackOff   0              154m

NAME                                   TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)             AGE
service/certified-operators            ClusterIP   172.30.144.63    <none>        50051/TCP           165m
service/community-operators            ClusterIP   172.30.194.181   <none>        50051/TCP           165m
service/marketplace-operator-metrics   ClusterIP   172.30.62.173    <none>        8383/TCP,8081/TCP   169m
service/redhat-marketplace             ClusterIP   172.30.2.123     <none>        50051/TCP           165m
service/redhat-operators               ClusterIP   172.30.38.189    <none>        50051/TCP           165m

NAME                                   READY   UP-TO-DATE   AVAILABLE   AGE
deployment.apps/marketplace-operator   1/1     1            1           169m

NAME                                             DESIRED   CURRENT   READY   AGE
replicaset.apps/marketplace-operator-68ddcd9c6   1         1         1       169m

[root@helper ~]# oc get pod/community-operators-tpzb7 -o jsonpath='{}' | jq '.status.phase'
"Pending"
[root@helper ~]# oc get pod/community-operators-tpzb7 -o jsonpath='{}' | jq '.status.containerStatuses[]'
{
  "image": "registry.redhat.io/redhat/community-operator-index:v4.11",
  "imageID": "",
  "lastState": {},
  "name": "registry-server",
  "ready": false,
  "restartCount": 0,
  "started": false,
  "state": {
    "waiting": {
      "message": "Back-off pulling image \"registry.redhat.io/redhat/community-operator-index:v4.11\"",
      "reason": "ImagePullBackOff"
    }
  }
}
[root@helper ~]# oc get event --field-selector involvedObject.name=community-operators-tpzb7,involvedObject.kind=Pod
LAST SEEN   TYPE      REASON           OBJECT                          MESSAGE
3h7m        Normal    Scheduled        pod/community-operators-tpzb7   Successfully assigned openshift-marketplace/community-operators-tpzb7 to master2.ocp1.kvmlocal by bootstrap.ocp1.kvmlocal
3h7m        Normal    AddedInterface   pod/community-operators-tpzb7   Add eth0 [10.254.1.15/24] from openshift-sdn
3h6m        Normal    Pulling          pod/community-operators-tpzb7   Pulling image "registry.redhat.io/redhat/community-operator-index:v4.11"
3h6m        Warning   Failed           pod/community-operators-tpzb7   Failed to pull image "registry.redhat.io/redhat/community-operator-index:v4.11": rpc error: code = Unknown desc = unable to retrieve auth token: invalid username/password: unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: https://access.redhat.com/articles/3399531
3h6m        Warning   Failed           pod/community-operators-tpzb7   Error: ErrImagePull
2m36s       Normal    BackOff          pod/community-operators-tpzb7   Back-off pulling image "registry.redhat.io/redhat/community-operator-index:v4.11"
167m        Warning   Failed           pod/community-operators-tpzb7   Error: ImagePullBackOff

As you can see, in the event message above, the reason for the ErrImagePull: "invalid username/password for registry.redhat.io".
I was able to pull "registry.redhat.io/redhat/community-operator-index:v4.11" manually, using my RedHat account credentials on your mashine.

[root@helper ~]# podman login registry.redhat.io
Username: hwassman
Password:
Login Succeeded!

[root@helper ~]# podman pull registry.redhat.io/redhat/community-operator-index:v4.11
Trying to pull registry.redhat.io/redhat/community-operator-index:v4.11...
Getting image source signatures
Checking if image destination supports signatures
Copying blob 2e9427b8c823 done
Copying blob d2da84f6e5b7 done
Copying blob 8e4de45042fd done
Copying blob 9136ac53452b done
Copying blob 05cd33a1bc38 done
Copying blob f25cf9b7681c done
Copying config ab1f1426fc done
Writing manifest to image destination
Storing signatures
ab1f1426fc5bc6f07eaa749f88a8bacf6c4982a2715f08180421ca2d56106450

Unfortunately, this did not solve ErrImagePull error by community-operator pod deployment, since the global pull secret still have invalid authentication credentials for "registry.redhat.io"

[root@helper ~]# oc get secret/pull-secret -n openshift-config -ojson | jq -r '.data[".dockerconfigjson"]' | base64 -d - | jq '.auths | with_entries(select(.key |contains("redhat")))'
{
  "registry.connect.redhat.com": {
    "auth": "NTMwMzU2MTl8dWhjLTFVdXY2RGVvU0oxM0lqelJ4YVlQUEtOclI0dTpleUpoYkdjaU9pSlNVelV4TWlKOS5leUp6ZFdJaU9pSXpNbU5rWm1JNU9HUmpOemcwTWpZeFlXUXhPR1E1T1RKa09EWXhaalpoTUNKOS5adGtxQjc4cEEyUmoxOHVzVWZGYmtVOXBQLW5XTU9aUW9...2RBSVJTcw==",
    "email": "[email protected]"
  },
  "registry.redhat.io": {
    "auth": "NTMwMzU2MTl8dWhjLTFVdXY2RGVvU0oxM0lqelJ4YVlQUEtOclI0dTpleUpoYkdjaU9pSlNVelV4TWlKOS5leUp6ZFdJaU9pSXpNbU5rWm1JNU9HUmpOemcwTWpZeFlXUXhPR1E1T1RKa09EWXhaalpoTUNKOS5adGtxQjc4cEEyUmoxOHVzVWZGYmtVOXBQLW5XTU9aUW9...2RBSVJTcw==",
    "email": "[email protected]"
  }
}

I think you should change the existing global pull secret for redhat registry on your machine, using valid user/password account credentials. Check the following articles:

https://access.redhat.com/RegistryAuthentication#creating-registry-service-accounts-6
https://access.redhat.com/solutions/4902871

from ibm-spectrum-scale-bridge-for-grafana.

Helene avatar Helene commented on June 23, 2024

Hi Frank,
I was able to solve this issue on my VM Openshift cluster. Here the steps I did.

  1. Download your personal redhat pull-secret from https://console.redhat.com/openshift/install/pull-secret
    redhat_pull_secret and store the pull-secret file on your ocp, f.e. /home/pull-secret

  2. Update the global cluster pull secret from the pull-secret file

[root@ocp1-helper ~]# oc set data secret/pull-secret -n openshift-config --from-file=.dockerconfigjson=/home/pull-secret
  1. Switch to openshift-marketplace namespace and check the state of the community-operators pods
[root@ocp1-helper ~]# oc project openshift-marketplace
Now using project "openshift-marketplace" on server "https://api.ocp1.vmlocal:6443".
[root@ocp1-helper ~]# oc get all
NAME                                        READY   STATUS             RESTARTS      AGE
pod/certified-operators-56lhz               0/1     ImagePullBackOff   0             12h
pod/certified-operators-ml7dw               0/1     ImagePullBackOff   0             12h
pod/community-operators-5cxb8               0/1     ImagePullBackOff   0             12h
pod/community-operators-pvvb9               0/1     ImagePullBackOff   0             12h
pod/marketplace-operator-66f6dbb69c-wgjbv   1/1     Running            1 (12h ago)   13h
pod/redhat-marketplace-999zz                0/1     ImagePullBackOff   0             12h
...
  1. If the pods still stay in ImagePullBackOff mode, delete them. New pods will be created by using updated pull-secret
[root@ocp1-helper ~]# oc get po
NAME                                        READY   STATUS             RESTARTS      AGE
pod/certified-operators-ml7dw               1/1     Running            0             13h
pod/community-operators-8bg62               1/1     Running            0             35s
pod/marketplace-operator-66f6dbb69c-wgjbv   1/1     Running            1 (12h ago)   13h
pod/redhat-marketplace-jlc58                1/1     Running            0             13h
pod/redhat-operators-2m8pm                  1/1     Running            0             12h
...
  1. Now the community operators should be available on your ocp. You can check it via openshift web console

operator_hub

from ibm-spectrum-scale-bridge-for-grafana.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.