Re: Remote image with referencePolicy.type=Local -> manifest unknown

2017-11-16 Thread Lionel Orellana
Thanks Ben, that makes sense. How do I add remote CAs to the registry though? On 17 November 2017 at 15:08, Ben Parees wrote: > The registry CAs are distinct from the image import controller CA. They > are two different processes running in two different environments. > > >

Re: Remote image with referencePolicy.type=Local -> manifest unknown

2017-11-16 Thread Ben Parees
The registry CAs are distinct from the image import controller CA. They are two different processes running in two different environments. Ben Parees | OpenShift On Nov 16, 2017 10:58 PM, "Lionel Orellana" wrote: > Looking at the registry logs, it's not happy with the

Re: Remote image with referencePolicy.type=Local -> manifest unknown

2017-11-16 Thread Lionel Orellana
Looking at the registry logs, it's not happy with the remote registry cert. time="2017-11-17T03:53:46.591715267Z" level=error msg="response completed with error" err.code="manifest unknown" err.detail=" x509: certificate signed by unknown authority" Given that oc import-image works I was

Re: OpenShift Docker build strategy using Dockerfiles & MongoDB Database creation

2017-11-16 Thread Ben Parees
On Wed, Nov 15, 2017 at 6:34 PM, Tien Hung Nguyen wrote: > Hi Ben, > > sorry, of course I meant the BuildConfig and yes, I have read your > documentation but it didn't help me to solve my problem since I'm still > getting errors. > > I have specified the following in my

Re: Remote image with referencePolicy.type=Local -> manifest unknown

2017-11-16 Thread Ben Parees
On Thu, Nov 16, 2017 at 7:57 PM, Lionel Orellana wrote: > Is pullthrough enabled on your registry? > > > Yes. > > "When performing pullthrough, the registry will use pull credentials found >> in the project associated with the image stream tag that is being >> referenced" >>

Re: Remote image with referencePolicy.type=Local -> manifest unknown

2017-11-16 Thread Lionel Orellana
> > Is pullthrough enabled on your registry? Yes. "When performing pullthrough, the registry will use pull credentials found > in the project associated with the image stream tag that is being > referenced" > I'm deploying in the same project where the image stream is. I have a dockercfg

Re: Remote image with referencePolicy.type=Local -> manifest unknown

2017-11-16 Thread Ben Parees
On Thu, Nov 16, 2017 at 5:36 PM, Lionel Orellana wrote: > Hi, > > I imported a remote image and set referencePolicy.type to Local in the > resulting tag. When I try to deploy an pod using this image stream tag I > get "rpc error: code = 2 desc = manifest unknown: manifest

Remote image with referencePolicy.type=Local -> manifest unknown

2017-11-16 Thread Lionel Orellana
Hi, I imported a remote image and set referencePolicy.type to Local in the resulting tag. When I try to deploy an pod using this image stream tag I get "rpc error: code = 2 desc = manifest unknown: manifest unknown". If I change the referencePolicy type to Source then the pod pulls the image

Re: Old JBoss AS 7.1.1 Java 7 container hangs

2017-11-16 Thread zemiak
Hello, we are running Payara (a Glassfish derivate) and we had to do some changes. It is related to the fact, that Payara is not running under a normal user, but under some artificial user: Of course, there are probably differences between Payara/Glassfish and JBoss, but it will give you at least

Old JBoss AS 7.1.1 Java 7 container hangs

2017-11-16 Thread Joel Pearson
Hi, I’m trying to get an existing docker container that has Oracle Java 7 and JBoss AS 7.1.1 running in OpenShift 3.6. However when JBoss tries to start the jvm it hangs with no output, in a terminal we’ve tried running the same Java command that standalone.sh runs and it hangs the same way.

Force external image sync

2017-11-16 Thread Lionel Orellana
Hi, I imported an image from an external private registry and set *importPolicy.scheduled *on the resulting image stream tag to true. It works nicely but it can take quite a few minutes for changes on the external tag to be sync'ed back. Is there an oc command to force the sync? Thanks Lionel.

Re: Dynamic storage - openshift origin 3.6 with AWS as cloudprovider

2017-11-16 Thread Md Faizan Ali
No, i did not hardcode credentials. I should have probably used IAM role for it when I was setting the cluster up. I will look into this by looking at the plays and try and understand why credentials were missing from the file. However, i hardcoded credentials in the controller file and restarted