[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: configuring periodic import of images



Can someone tell me if I'm understanding the difference between alias=true and scheduled=true for tagging imagestreams as documented at https://docs.openshift.org/latest/dev_guide/managing_images.html#adding-tag ?

The way I read it is that alias true will track the source image tag and update the destination when the source is updated, whereas scheduled does the same thing but only on a periodic basis. Am I off on that?

On Mon, Aug 15, 2016 at 4:04 PM, Tony Saxon <tony saxon gmail com> wrote:
I'm using a registry deployed from a docker compose:

registry:
  restart: always
  image: registry:2.2.1
  ports:
    - 5000:5000
  environment:
    REGISTRY_HTTP_TLS_CERTIFICATE: /certs/domain.crt
    REGISTRY_HTTP_TLS_KEY: /certs/domain.key
    REGISTRY_AUTH: htpasswd
    REGISTRY_AUTH_HTPASSWD_PATH: /auth/htpasswd
    REGISTRY_AUTH_HTPASSWD_REALM: Registry Realm
  volumes:
    - /var/docker/registry/data:/var/lib/registry
    - /var/docker/registry/certs:/certs
    - /var/docker/registry/auth:/auth


It was originally using "image:2" but that was the one that I had problems even importing the docker imaged due to the schema v1/v2 issue. After changing it to 2.2.1 and repushing the image it worked.

On Mon, Aug 15, 2016 at 4:00 PM, Clayton Coleman <ccoleman redhat com> wrote:
Did a test, but the import looks like it works correctly for hub images.  In this case are you using a regular Docker registry, the integrated registry, or a third party Docker registry?

On Mon, Aug 15, 2016 at 3:34 PM, Clayton Coleman <ccoleman redhat com> wrote:
It's currently 15 minutes:

imagePolicyConfig:
  disableScheduledImport: false
  maxImagesBulkImportedPerRepository: 5
  maxScheduledImageImportsPerMinute: 60
  scheduledImageImportMinimumIntervalSeconds: 900

Will take a look and see if I can recreate this issue.


On Mon, Aug 15, 2016 at 2:33 PM, Tony Saxon <tony saxon gmail com> wrote:

So I've found that if I tag the imagestream manually, that it is able to pull down the latest changes and deploys them to my app:

oc tag --source=docker --scheduled=true docker-lab.example.com:5000/testwebapp:latest testwebapp:latest

[root os-master ~]# oc describe is
Name:                   testwebapp
Created:                4 days ago
Labels:                 <none>
Annotations:            openshift.io/image.dockerRepositoryCheck=2016-08-15T17:49:36Z
Docker Pull Spec:       172.30.11.167:5000/testwebapp/testwebapp

Tag     Spec                                                    Created                 PullSpec                                                                Image
latest  docker-lab.example.com:5000/testwebapp:latest *        38 minutes ago          docker-lab.example.com:5000/testwebapp sha256:dd75ff58184489...        <same>
                                                                About an hour ago       docker-lab.example.com:5000/testwebapp sha256:2a4f9e1262e377...        <same>
                                                                4 days ago              docker-lab.example.com:5000/testwebapp sha256:c1c8c6c3e1c672...        <same>

  * tag is scheduled for periodic import
  ! tag is insecure and can be imported over HTTP or self-signed HTTPS


This updates the tags, redeploys the pods and all my new changes are visible once the new containers are up. It appears that it's not doing the periodic import despite being configured to. What is the default period that it uses to check the source registry?


On Mon, Aug 15, 2016 at 2:29 PM, Tony Saxon <tony saxon gmail com> wrote:
So I've found that if I tag the imagestream manually, that it is able to pull down the latest changes and deploys them to my app:

On Mon, Aug 15, 2016 at 8:46 AM, Tony Saxon <tony saxon gmail com> wrote:
There are logs showing that it's detecting that the imagestream has changed, but doesn't seem like there's any explanation of why it can't get it:

Aug 15 08:18:10 os-master origin-master: I0815 08:18:10.446822   77042 image_change_controller.go:47] Build image change controller detected ImageStream change 172.30.11.167:5000/testwebapp/testwebapp
Aug 15 08:20:01 os-master origin-master: ation":2}]},{"tag":"8.1","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-81-centos7@sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","image":"sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","generation":2}]},{"tag":"9.0","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-90-centos7 sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","image":"sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","generation":2}]},{"tag":"latest","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-100-centos7@sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","image":"sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","generation":2}]}]}},{"metadata":{"name":"testwebapp","namespace":"testwebapp","selfLink":"/oapi/v1/namespaces/testwebapp/imagestreams/testwebapp","uid":"dae5b8d1-5fc3-11e6-88da-525400f41cdb","resourceVersion":"359311","generation":2,"creationTimestamp":"2016-08-11T13:02:27Z","annotations":{"openshift.io/image.dockerRepositoryCheck":"2016-08-11T13:02:27Z"}},"spec":{"tags":[{"name":"latest","annotations":null,"from":{"kind":"DockerImage","name":"docker-lab.example.com:5000/testwebapp:latest"},"generation":1,"importPolicy":{"scheduled":true}}]},"status":{"dockerImageRepository":"172.30.11.167:5000/testwebapp/testwebapp","tags":[{"tag":"latest","items":[{"created":"2016-08-11T13:02:27Z","dockerImageReference":"docker-lab.example.com:5000/testwebapp sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","image":"sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","generation":1}]}]}}]}
Aug 15 08:22:00 os-master origin-master: ation":2}]},{"tag":"8.1","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-81-centos7@sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","image":"sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","generation":2}]},{"tag":"9.0","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-90-centos7 sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","image":"sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","generation":2}]},{"tag":"latest","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-100-centos7@sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","image":"sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","generation":2}]}]}},{"metadata":{"name":"testwebapp","namespace":"testwebapp","selfLink":"/oapi/v1/namespaces/testwebapp/imagestreams/testwebapp","uid":"dae5b8d1-5fc3-11e6-88da-525400f41cdb","resourceVersion":"359311","generation":2,"creationTimestamp":"2016-08-11T13:02:27Z","annotations":{"openshift.io/image.dockerRepositoryCheck":"2016-08-11T13:02:27Z"}},"spec":{"tags":[{"name":"latest","annotations":null,"from":{"kind":"DockerImage","name":"docker-lab.example.com:5000/testwebapp:latest"},"generation":1,"importPolicy":{"scheduled":true}}]},"status":{"dockerImageRepository":"172.30.11.167:5000/testwebapp/testwebapp","tags":[{"tag":"latest","items":[{"created":"2016-08-11T13:02:27Z","dockerImageReference":"docker-lab.example.com:5000/testwebapp sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","image":"sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","generation":1}]}]}}]}
Aug 15 08:23:59 os-master origin-master: ation":2}]},{"tag":"8.1","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-81-centos7@sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","image":"sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","generation":2}]},{"tag":"9.0","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-90-centos7 sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","image":"sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","generation":2}]},{"tag":"latest","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-100-centos7@sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","image":"sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","generation":2}]}]}},{"metadata":{"name":"testwebapp","namespace":"testwebapp","selfLink":"/oapi/v1/namespaces/testwebapp/imagestreams/testwebapp","uid":"dae5b8d1-5fc3-11e6-88da-525400f41cdb","resourceVersion":"359311","generation":2,"creationTimestamp":"2016-08-11T13:02:27Z","annotations":{"openshift.io/image.dockerRepositoryCheck":"2016-08-11T13:02:27Z"}},"spec":{"tags":[{"name":"latest","annotations":null,"from":{"kind":"DockerImage","name":"docker-lab.example.com:5000/testwebapp:latest"},"generation":1,"importPolicy":{"scheduled":true}}]},"status":{"dockerImageRepository":"172.30.11.167:5000/testwebapp/testwebapp","tags":[{"tag":"latest","items":[{"created":"2016-08-11T13:02:27Z","dockerImageReference":"docker-lab.example.com:5000/testwebapp sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","image":"sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","generation":1}]}]}}]}
Aug 15 08:25:58 os-master origin-master: ation":2}]},{"tag":"8.1","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-81-centos7@sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","image":"sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","generation":2}]},{"tag":"9.0","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-90-centos7 sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","image":"sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","generation":2}]},{"tag":"latest","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-100-centos7@sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","image":"sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","generation":2}]}]}},{"metadata":{"name":"testwebapp","namespace":"testwebapp","selfLink":"/oapi/v1/namespaces/testwebapp/imagestreams/testwebapp","uid":"dae5b8d1-5fc3-11e6-88da-525400f41cdb","resourceVersion":"359311","generation":2,"creationTimestamp":"2016-08-11T13:02:27Z","annotations":{"openshift.io/image.dockerRepositoryCheck":"2016-08-11T13:02:27Z"}},"spec":{"tags":[{"name":"latest","annotations":null,"from":{"kind":"DockerImage","name":"docker-lab.example.com:5000/testwebapp:latest"},"generation":1,"importPolicy":{"scheduled":true}}]},"status":{"dockerImageRepository":"172.30.11.167:5000/testwebapp/testwebapp","tags":[{"tag":"latest","items":[{"created":"2016-08-11T13:02:27Z","dockerImageReference":"docker-lab.example.com:5000/testwebapp sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","image":"sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","generation":1}]}]}}]}
Aug 15 08:27:57 os-master origin-master: ation":2}]},{"tag":"8.1","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-81-centos7@sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","image":"sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","generation":2}]},{"tag":"9.0","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-90-centos7 sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","image":"sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","generation":2}]},{"tag":"latest","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-100-centos7@sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","image":"sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","generation":2}]}]}},{"metadata":{"name":"testwebapp","namespace":"testwebapp","selfLink":"/oapi/v1/namespaces/testwebapp/imagestreams/testwebapp","uid":"dae5b8d1-5fc3-11e6-88da-525400f41cdb","resourceVersion":"359311","generation":2,"creationTimestamp":"2016-08-11T13:02:27Z","annotations":{"openshift.io/image.dockerRepositoryCheck":"2016-08-11T13:02:27Z"}},"spec":{"tags":[{"name":"latest","annotations":null,"from":{"kind":"DockerImage","name":"docker-lab.example.com:5000/testwebapp:latest"},"generation":1,"importPolicy":{"scheduled":true}}]},"status":{"dockerImageRepository":"172.30.11.167:5000/testwebapp/testwebapp","tags":[{"tag":"latest","items":[{"created":"2016-08-11T13:02:27Z","dockerImageReference":"docker-lab.example.com:5000/testwebapp sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","image":"sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","generation":1}]}]}}]}
Aug 15 08:29:56 os-master origin-master: ation":2}]},{"tag":"8.1","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-81-centos7@sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","image":"sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","generation":2}]},{"tag":"9.0","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-90-centos7 sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","image":"sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","generation":2}]},{"tag":"latest","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-100-centos7@sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","image":"sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","generation":2}]}]}},{"metadata":{"name":"testwebapp","namespace":"testwebapp","selfLink":"/oapi/v1/namespaces/testwebapp/imagestreams/testwebapp","uid":"dae5b8d1-5fc3-11e6-88da-525400f41cdb","resourceVersion":"359311","generation":2,"creationTimestamp":"2016-08-11T13:02:27Z","annotations":{"openshift.io/image.dockerRepositoryCheck":"2016-08-11T13:02:27Z"}},"spec":{"tags":[{"name":"latest","annotations":null,"from":{"kind":"DockerImage","name":"docker-lab.example.com:5000/testwebapp:latest"},"generation":1,"importPolicy":{"scheduled":true}}]},"status":{"dockerImageRepository":"172.30.11.167:5000/testwebapp/testwebapp","tags":[{"tag":"latest","items":[{"created":"2016-08-11T13:02:27Z","dockerImageReference":"docker-lab.example.com:5000/testwebapp sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","image":"sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","generation":1}]}]}}]}
Aug 15 08:31:55 os-master origin-master: ation":2}]},{"tag":"8.1","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-81-centos7@sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","image":"sha256:68a27d407fd1ead3b8a9e33aa2054c948ad3a54556d28bb4caaf704a0f651f96","generation":2}]},{"tag":"9.0","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-90-centos7 sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","image":"sha256:212d8e093d50b44cf8dd3101d22e7efce6293d741a6dc30fced9cd27b70c7c22","generation":2}]},{"tag":"latest","items":[{"created":"2016-08-02T18:21:31Z","dockerImageReference":"openshift/wildfly-100-centos7@sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","image":"sha256:5a428b5b36d4cd98dce8603d5accb30ff014b7d4fb73c2bb895edda89cabbb3d","generation":2}]}]}},{"metadata":{"name":"testwebapp","namespace":"testwebapp","selfLink":"/oapi/v1/namespaces/testwebapp/imagestreams/testwebapp","uid":"dae5b8d1-5fc3-11e6-88da-525400f41cdb","resourceVersion":"359311","generation":2,"creationTimestamp":"2016-08-11T13:02:27Z","annotations":{"openshift.io/image.dockerRepositoryCheck":"2016-08-11T13:02:27Z"}},"spec":{"tags":[{"name":"latest","annotations":null,"from":{"kind":"DockerImage","name":"docker-lab.example.com:5000/testwebapp:latest"},"generation":1,"importPolicy":{"scheduled":true}}]},"status":{"dockerImageRepository":"172.30.11.167:5000/testwebapp/testwebapp","tags":[{"tag":"latest","items":[{"created":"2016-08-11T13:02:27Z","dockerImageReference":"docker-lab.example.com:5000/testwebapp sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","image":"sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074","generation":1}]}]}}]}
Aug 15 08:35:52 os-master origin-master: I0815 08:35:52.390224    8534 image_change_controller.go:47] Build image change controller detected ImageStream change 172.30.11.167:5000/testwebapp/testwebapp
Aug 15 08:37:51 os-master origin-master: I0815 08:37:51.410291    8534 image_change_controller.go:47] Build image change controller detected ImageStream change 172.30.11.167:5000/testwebapp/testwebapp
Aug 15 08:39:50 os-master origin-master: I0815 08:39:50.700442    8534 image_change_controller.go:47] Build image change controller detected ImageStream change 172.30.11.167:5000/testwebapp/testwebapp
Aug 15 08:41:49 os-master origin-master: I0815 08:41:49.807374    8534 image_change_controller.go:47] Build image change controller detected ImageStream change 172.30.11.167:5000/testwebapp/testwebapp
Aug 15 08:43:48 os-master origin-master: I0815 08:43:48.756181    8534 image_change_controller.go:47] Build image change controller detected ImageStream change 172.30.11.167:5000/testwebapp/testwebapp


On Fri, Aug 12, 2016 at 11:20 AM, Clayton Coleman <ccoleman redhat com> wrote:
When you restart your server it should attempt to import everything.  Can you restart the openshift controllers process (or master, if you aren't running the separate controllers process) with --loglevel=5 and search for "172.30.11.167:5000/testwebapp/testwebapp"?  You should see log lines about importing the image and a result about why it isn't imported.

On Fri, Aug 12, 2016 at 9:57 AM, Tony Saxon <tony saxon gmail com> wrote:
Right, I get the v1schema vs v2schema issue. What I'm saying is that I've already been able to import the image from the private docker repository into an imagestream:

[root os-master ~]# oc describe is
Name:                   testwebapp
Created:                24 hours ago
Labels:                 <none>
Annotations:            openshift.io/image.dockerRepositoryCheck=2016-08-11T13:02:27Z
Docker Pull Spec:       172.30.11.167:5000/testwebapp/testwebapp

Tag     Spec                                                    Created         PullSpec                                                                Image
latest  docker-lab.example.com:5000/testwebapp:latest *        24 hours ago    docker-lab.example.com:5000/testwebapp sha256:c1c8c6c3e1c672...        <same>

  * tag is scheduled for periodic import
  ! tag is insecure and can be imported over HTTP or self-signed HTTPS


[root os-master ~]# oc describe dc/testwebapp
Name:           testwebapp
Created:        24 hours ago
Labels:         app=testwebapp
Annotations:    openshift.io/generated-by=OpenShiftNewApp
Latest Version: 3
Selector:       app=testwebapp,deploymentconfig=testwebapp
Replicas:       3
Triggers:       Config, Image(testwebapp latest, auto=true)
Strategy:       Rolling
Template:
  Labels:       app=testwebapp,deploymentconfig=testwebapp
  Annotations:  openshift.io/container.testwebapp.image.entrypoint=["/bin/sh","-c","/usr/local/tomcat/bin/startup.sh \u0026\u0026 tail -f /usr/local/tomcat/logs/catalina.out"],openshift.io/generated-by=OpenShiftNewApp
  Containers:
  testwebapp:
    Image:      docker-lab.example.com:5000/testwebapp sha256:c1c8c6c3e1c6729d1366acaf54c9772b4849f35d971e73449cf9044f3af06074
    Port:
    QoS Tier:
      cpu:      BestEffort
      memory:   BestEffort
    Environment Variables:
  No volumes.

Deployment #3 (latest):
        Name:           testwebapp-3
        Created:        18 hours ago
        Status:         Complete
        Replicas:       3 current / 3 desired
        Selector:       app=testwebapp,deployment=testwebapp-3,deploymentconfig=testwebapp
        Labels:         app=testwebapp,openshift.io/deployment-config.name=testwebapp
        Pods Status:    3 Running / 0 Waiting / 0 Succeeded / 0 Failed
Deployment #2:
        Created:        21 hours ago
        Status:         Complete
        Replicas:       0 current / 0 desired
Deployment #1:
        Created:        24 hours ago
        Status:         Complete
        Replicas:       0 current / 0 desired

No events.

All updated images have been pushed to the registry from the same docker client. If the issue was the manifest 2 vs 1 issue wouldn't I have been unable to deploy the app initially as well?

On Fri, Aug 12, 2016 at 9:30 AM, Clayton Coleman <ccoleman redhat com> wrote:
To have openshift import an image's metadata from another registry (which finds the digest ID of the image, so that internally you can trigger deployments that use the latest digest ID), OpenShift needs to be able to get the correct digest ID.  When Docker 1.10+ tries to push an image, it first tries to push as a v2schema, and if that fails pushes as a v1schema.  Because v1schema and v2schema have different digest IDs, when a v2schema is pushed the Docker registry tells OpenShift 1.2 that the digest is the v1schema value, but in reality only the v2schema value can be pulled.  

OpenShift 1.3 adds support for using the newer registry client so that it gets the v2schema value.  We hope to cut an rc very soon, but until then, if you want to have openshift import images by digest (what most of the tools do by default) you need to push your images using Docker 1.9.  If you want to bypass the import by digest, you can use the `--reference` flag which only imports the tag name (but includes none of the metadata):

    oc tag --reference --source=docker SOME_DOCKER_TAG IMAGESTREAM:TAG



On Fri, Aug 12, 2016 at 8:58 AM, Tony Saxon <tony saxon gmail com> wrote:
Ok, so I'm a little confused. If my problem is the manifest schema, I had thought that I already fixed that by downgrading my private registry to an older version that didn't support schema 2 (http://lists.openshift.redhat.com/openshift-archives/users/2016-August/msg00081.html).

Basically I downgraded my registry to version 2.2.1 just so that I could deploy an application from an imagestream that pulled from my private registry. That works successfully.

Does the internal registry that is used by docker support schema 2? If I reconfigure that to be secure and expose it externally and push my images to that will I still run into this problem?

On Thu, Aug 11, 2016 at 9:26 PM, Philippe Lafoucrière <philippe lafoucriere tech-angels.com> wrote:


_______________________________________________
users mailing list
users lists openshift redhat com
http://lists.openshift.redhat.com/openshiftmm/listinfo/users












[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]