Skip to content

Ensure pull secrets exist for operator when deploying in Konflux mode#171

Merged
mclasmeier merged 1 commit into
mainfrom
mc/operator-image-pull-secrets-for-konflux-mode
May 12, 2026
Merged

Ensure pull secrets exist for operator when deploying in Konflux mode#171
mclasmeier merged 1 commit into
mainfrom
mc/operator-image-pull-secrets-for-konflux-mode

Conversation

@mclasmeier
Copy link
Copy Markdown
Collaborator

@mclasmeier mclasmeier commented May 12, 2026

The release operator images need pull secrets, so this currently cannot work on non-Infra OpenShift4 clusters (prow).

Required for CI.

The permissions for the stackrox operator are configured differently:

$ podman pull --authfile <(echo '{"auths":{}}')  quay.io/rhacs-eng/release-operator@sha256:9bf4a54025201b67c02e09c600faa0260ae8817ac59989cef581b57c4d80dd4d
Trying to pull quay.io/rhacs-eng/release-operator@sha256:9bf4a54025201b67c02e09c600faa0260ae8817ac59989cef581b57c4d80dd4d...
Error: unable to copy from source docker://quay.io/rhacs-eng/release-operator@sha256:9bf4a54025201b67c02e09c600faa0260ae8817ac59989cef581b57c4d80dd4d: initializing source docker://quay.io/rhacs-eng/release-operator@sha256:9bf4a54025201b67c02e09c600faa0260ae8817ac59989cef581b57c4d80dd4d: reading manifest sha256:9bf4a54025201b67c02e09c600faa0260ae8817ac59989cef581b57c4d80dd4d in quay.io/rhacs-eng/release-operator: unauthorized: access to the requested resource is not authorized

$ podman pull --authfile <(echo '{"auths":{}}')  quay.io/rhacs-eng/stackrox-operator:4.11.0-898-g1ebf3f7e67 
Trying to pull quay.io/rhacs-eng/stackrox-operator:4.11.0-898-g1ebf3f7e67...
Getting image source signatures
Copying blob sha256:4234dac3570e02b3aa1d49aedb5c5ef5378df0935a4baf9141d55bde240c5f7c
Copying blob sha256:c2550b843b5063e062f8f843914c1c7aefb0c9c65a7b33e3692a7cecbf596bd2
Copying config sha256:ea71e467e9fdc0f82404e7a59ef78a80d43937eae8f53e31361e027f92c87526
Writing manifest to image destination
ea71e467e9fdc0f82404e7a59ef78a80d43937eae8f53e31361e027f92c87526

@mclasmeier mclasmeier requested a review from vladbologa May 12, 2026 10:07
@mclasmeier mclasmeier added ci-rollout Marks a PR to be a prerequisite for rolling out roxie in stackrox CI. olm-tests If set, spawn an OpenShift cluster and run OLM tests against it. labels May 12, 2026
Comment thread internal/deployer/operator.go
@mclasmeier mclasmeier merged commit b4991fe into main May 12, 2026
11 checks passed
@mclasmeier mclasmeier deleted the mc/operator-image-pull-secrets-for-konflux-mode branch May 18, 2026 11:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci-rollout Marks a PR to be a prerequisite for rolling out roxie in stackrox CI. olm-tests If set, spawn an OpenShift cluster and run OLM tests against it.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants