Skip to content

fix: add imagePullSecrets to argo-events#1794

Merged
skrobul merged 1 commit into
mainfrom
fix-prod-workflow-sa
Mar 11, 2026
Merged

fix: add imagePullSecrets to argo-events#1794
skrobul merged 1 commit into
mainfrom
fix-prod-workflow-sa

Conversation

@skrobul
Copy link
Copy Markdown
Collaborator

@skrobul skrobul commented Mar 11, 2026

We used to have that in undercloud-deploy but was removed in 834fdb34d845f8276eeec73de80f2debab23e8ea. Without this, the argo workflows are not able to pull the images:

Normal   BackOff  2m33s (x2539 over 9h)  kubelet  Back-off pulling image "ghcr.io/REDACTED/undercloud-nautobot/ansible:latest"
Warning  Failed   2m33s (x2539 over 9h)  kubelet  Error: ImagePullBackOff
Mar 11 11:17:24 infra1 kubelet[1313545]: E0311 11:17:24.305694 1313545 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"main\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/REDACTED/undercloud-nautobot/ansible:latest\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/REDACTED/undercloud-nautobot/ansible:latest\\\": failed to resolve reference \\\"ghcr.io/REDACTED/undercloud-nautobot/ansible:latest\\\": failed to authorize: failed to fetch anonymous token: unexpected status from GET request to https://ghcr.io/token?scope=repository%3AREDACTED%2Fundercloud-nautobot%2Fansible%3Apull&service=ghcr.io: 401 Unauthorized\"" pod="argo-events/nova-delete-tcr72-ansible-run-3671246348" podUID="bcf50140-0467-4583-96cc-3fe3f5c41fac"

We used to have that in undercloud-deploy but was removed in 834fdb34d845f8276eeec73de80f2debab23e8ea.
Without this, the argo workflows are not able to pull the images:

```
Normal   BackOff  2m33s (x2539 over 9h)  kubelet  Back-off pulling image "ghcr.io/rss-engineering/undercloud-nautobot/ansible:latest"
Warning  Failed   2m33s (x2539 over 9h)  kubelet  Error: ImagePullBackOff
```

```
Mar 11 11:17:24 infra1 kubelet[1313545]: E0311 11:17:24.305694 1313545 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"main\" with ImagePullBackOff: \"Back-off pulling image \\\"ghcr.io/rss-engineering/undercloud-nautobot/ansible:latest\\\": ErrImagePull: failed to pull and unpack image \\\"ghcr.io/rss-engineering/undercloud-nautobot/ansible:latest\\\": failed to resolve reference \\\"ghcr.io/rss-engineering/undercloud-nautobot/ansible:latest\\\": failed to authorize: failed to fetch anonymous token: unexpected status from GET request to https://ghcr.io/token?scope=repository%3Arss-engineering%2Fundercloud-nautobot%2Fansible%3Apull&service=ghcr.io: 401 Unauthorized\"" pod="argo-events/nova-delete-tcr72-ansible-run-3671246348" podUID="bcf50140-0467-4583-96cc-3fe3f5c41fac"
```
@skrobul skrobul requested a review from a team March 11, 2026 11:28
@skrobul skrobul added this pull request to the merge queue Mar 11, 2026
Merged via the queue into main with commit 626c592 Mar 11, 2026
17 checks passed
@skrobul skrobul deleted the fix-prod-workflow-sa branch March 11, 2026 14:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants