Conversation
af8785f to
2dcb13c
Compare
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 57m 07s |
|
recheck |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: evallesp The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 47m 06s |
|
recheck |
1 similar comment
|
recheck |
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 12m 02s |
|
recheck |
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 21m 45s |
|
This PR is stale because it has been for over 15 days with no activity. |
|
recheck |
1 similar comment
|
recheck |
|
New changes are detected. LGTM label has been removed. |
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 5h 26m 33s |
a31dff8 to
9c0346f
Compare
|
/retest-required |
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 29m 13s |
|
/test images |
Qodo reviews are paused for this user.Troubleshooting steps vary by plan Learn more → On a Teams plan? Using GitHub Enterprise Server, GitLab Self-Managed, or Bitbucket Data Center? |
|
/retest-required |
8d8ad43 to
4e23382
Compare
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 17m 21s |
|
recheck |
4e23382 to
cfe2aa5
Compare
|
Seems the CI jobs also are affected with the centos latest image bug - that image name is just wrong |
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 30m 48s |
When cifmw_openshift_setup_catalog_registry_credentials is defined: - Merge the auth into the cluster pull-secret so nodes can pull from the Konflux image-rbac-proxy registry. - Add the catalog registry to insecure and allowed registries to bypass image signature validation for Konflux-built FBC catalogs. - Wait for MachineConfigPools to settle after IDMS + pull-secret changes before proceeding. Related-Issue: #OSPCIX-1431 Signed-off-by: Roberto Alfieri <ralfieri@redhat.com> Co-authored-by: Cursor <cursoragent@cursor.com>
d0549e8 to
109c491
Compare
109c491 to
1227a26
Compare
|
Build succeeded (check pipeline). ✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 32m 12s |
This branch has not been deployed
5 participants
Summary
When
cifmw_openshift_setup_catalog_registry_credentialsis defined:openshift-config/pull-secretso nodes can pull from the Konfluximage-rbac-proxyregistry.insecureRegistriesandallowedRegistriesto bypass image signature validation for Konflux-built FBC catalogs.All three actions are gated on
cifmw_openshift_setup_catalog_registry_credentials— jobs that don't set it are completely unaffected.Context
Architecture-update jobs on OCP 4.18 need
openstack-operator.v1.0.7from a Konflux FBC catalog behindimage-rbac-proxy. The cluster needs pull-secret credentials AND signature policy bypass for that registry before the CatalogSource pod can pull.Related-Issue: #ANVIL-159