I'm not sure if this has anything to do with it, but I looked at the
details of the imagestream that I imported and see that it has this as the
docker image reference:
status:
dockerImageRepository: 172.30.11.167:5000/testwebapp/testwebapp
tags:
- items:
- created: 2016-08-10T13:26:01Z
dockerImageReference:
docker-lab.example.com:5000/testwebapp@sha256:9799a25cd6fd7f7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3
generation: 1
image:
sha256:9799a25cd6fd7f7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3
tag: latest
I also see these errors show up on the docker registry when I try to deploy
the app:
time="2016-08-10T16:58:26Z" level=warning msg="error authorizing context:
basic authentication challenge for realm \"Registry Realm\": invalid
authorization credential" go.version=go1.6.3 http.request.host="
docker-lab.evolveip.net:5000"
http.request.id=ecce6c57-6273-42d6-b7a9-441877c0338f
http.request.method=GET http.request.remoteaddr="192.168.122.156:35858"
http.request.uri="/v2/" http.request.useragent="docker/1.10.3 go/go1.4.2
git-commit/9419b24-unsupported kernel/3.10.0-327.22.2.el7.x86_64 os/linux
arch/amd64" instance.id=f0d70491-6e34-44eb-a51c-3b13eae8daa6 version=v2.5.0
192.168.122.156 - - [10/Aug/2016:16:58:26 +0000] "GET /v2/ HTTP/1.1" 401 87
"" "docker/1.10.3 go/go1.4.2 git-commit/9419b24-unsupported
kernel/3.10.0-327.22.2.el7.x86_64 os/linux arch/amd64"
time="2016-08-10T16:58:26Z" level=error msg="response completed with error"
auth.user.name=maven err.code="manifest unknown" err.detail="unknown
manifest name=testwebapp
revision=sha256:9799a25cd6fd7f7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3"
err.message="manifest unknown" go.version=go1.6.3 http.request.host="
docker-lab.evolveip.net:5000"
http.request.id=b994a477-6beb-4908-8589-c051b9048e87
http.request.method=GET http.request.remoteaddr="192.168.122.156:35860"
http.request.uri="/v2/testwebapp/manifests/sha256:9799a25cd6fd7f7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3"
http.request.useragent="docker/1.10.3 go/go1.4.2
git-commit/9419b24-unsupported kernel/3.10.0-327.22.2.el7.x86_64 os/linux
arch/amd64" http.response.contenttype="application/json; charset=utf-8"
http.response.duration=6.04215ms http.response.status=404
http.response.written=186 instance.id=f0d70491-6e34-44eb-a51c-3b13eae8daa6
vars.name=testwebapp
vars.reference="sha256:9799a25cd6fd7f7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3"
version=v2.5.0
192.168.122.156 - - [10/Aug/2016:16:58:26 +0000] "GET
/v2/testwebapp/manifests/sha256:9799a25cd6fd7f7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3
HTTP/1.1" 404 186 "" "docker/1.10.3 go/go1.4.2
git-commit/9419b24-unsupported kernel/3.10.0-327.22.2.el7.x86_64 os/linux
arch/amd64"
So it looks like the manifest isn't found, or am I misunderstanding that?
The imagestream was imported by simply:
[root@os-master ~]# oc import-image testwebapp --confirm --from=
docker-lab.example.com:5000/testwebapp:latest
The import completed successfully.
Name: testwebapp
Created: Less than a second ago
Labels: <none>
Annotations:
openshift.io/image.dockerRepositoryCheck=2016-08-10T17:01:46Z
Docker Pull Spec: 172.30.11.167:5000/testwebapp/testwebapp
Tag Spec Created
PullSpec
Image
latest docker-lab.example.com:5000/testwebapp:latest 1 seconds ago
docker-lab.example.com:5000/testwebapp@sha256:9799a25cd6fd7f...
<same>
On Wed, Aug 10, 2016 at 11:39 AM, Tony Saxon <[email protected]> wrote:
> Not a problem, can you point me in the right direction for how to get
> those logs?
>
> For the first one, I know I can set the USER option in the dockerfile that
> builds the docker image. Does it matter what user I set that as? I'm
> assuming that the user needs to exist on the nodes...
>
> On Wed, Aug 10, 2016 at 11:20 AM, Maciej Szulik <[email protected]>
> wrote:
>
>> There are two problems here:
>> 1. WARNING: Image "testwebapp" runs as the 'root' user which may not be
>> permitted by your cluster administrator
>> unless your user is allowed to run privileged containers you should
>> fix that.
>> 2. Error from server: container "testwebapp" in pod "testwebapp-1-1x7ex"
>> is waiting to start: image can't be pulled
>>
>> First it would be good to get rid of no 1. for the latter I'd need to see
>> master logs with loglevel=8 if it's not a problem.
>>
>>
>>
>> On Wed, Aug 10, 2016 at 5:14 PM, Tony Saxon <[email protected]> wrote:
>>
>>> It does not work:
>>>
>>> [root@os-master ~]# oc new-app testwebapp
>>> --> Found image 59826fe (4 days old) in image stream testwebapp under
>>> tag "latest" for "testwebapp"
>>>
>>> * This image will be deployed in deployment config "testwebapp"
>>> * The image does not expose any ports - if you want to load balance
>>> or send traffic to this component
>>> you will need to create a service with 'expose dc/testwebapp
>>> --port=[port]' later
>>> * WARNING: Image "testwebapp" runs as the 'root' user which may not
>>> be permitted by your cluster administrator
>>>
>>> --> Creating resources with label app=testwebapp ...
>>> deploymentconfig "testwebapp" created
>>> --> Success
>>> Run 'oc status' to view your app.
>>> [root@os-master ~]# oc status
>>> In project testwebapp on server https://os-master.libvirt:8443
>>>
>>> dc/testwebapp deploys istag/testwebapp:latest
>>> deployment #1 pending 5 seconds ago
>>>
>>> 1 warning identified, use 'oc status -v' to see details.
>>> [root@os-master ~]# oc get pods
>>> NAME READY STATUS RESTARTS AGE
>>> testwebapp-1-1x7ex 0/1 ContainerCreating 0 3s
>>> testwebapp-1-deploy 1/1 Running 0 9s
>>> [root@os-master ~]# oc get pods
>>> NAME READY STATUS RESTARTS AGE
>>> testwebapp-1-1x7ex 0/1 ErrImagePull 0 6s
>>> testwebapp-1-deploy 1/1 Running 0 12s
>>> [root@os-master ~]# oc logs testwebapp-1-1x7ex
>>> Error from server: container "testwebapp" in pod "testwebapp-1-1x7ex" is
>>> waiting to start: image can't be pulled
>>> [root@os-master ~]#
>>>
>>> On Wed, Aug 10, 2016 at 10:58 AM, Maciej Szulik <[email protected]>
>>> wrote:
>>>
>>>> Yeah, that looks ok, did that work? If not, what error did you get?
>>>>
>>>>
>>>>
>>>> On Wed, Aug 10, 2016 at 4:19 PM, Tony Saxon <[email protected]>
>>>> wrote:
>>>>
>>>>> I've done that:
>>>>>
>>>>> [root@os-master ~]# oc get secrets
>>>>> NAME TYPE
>>>>> DATA AGE
>>>>> builder-dockercfg-7bjoo kubernetes.io/dockercfg
>>>>> 1 1d
>>>>> builder-token-gi9o9 kubernetes.io/service-account-token
>>>>> 3 1d
>>>>> builder-token-wf31u kubernetes.io/service-account-token
>>>>> 3 1d
>>>>> default-dockercfg-pfota kubernetes.io/dockercfg
>>>>> 1 1d
>>>>> default-token-vbcmc kubernetes.io/service-account-token
>>>>> 3 1d
>>>>> default-token-xffu5 kubernetes.io/service-account-token
>>>>> 3 1d
>>>>> deployer-dockercfg-lfiuw kubernetes.io/dockercfg
>>>>> 1 1d
>>>>> deployer-token-9euo2 kubernetes.io/service-account-token
>>>>> 3 1d
>>>>> deployer-token-mq6vw kubernetes.io/service-account-token
>>>>> 3 1d
>>>>> docker-lab kubernetes.io/dockercfg
>>>>> 1 19h
>>>>>
>>>>> [root@os-master ~]# oc describe sa default
>>>>> Name: default
>>>>> Namespace: testwebapp
>>>>> Labels: <none>
>>>>>
>>>>> Image pull secrets: default-dockercfg-pfota
>>>>> docker-lab
>>>>>
>>>>> Mountable secrets: default-token-xffu5
>>>>> default-dockercfg-pfota
>>>>>
>>>>> Tokens: default-token-vbcmc
>>>>> default-token-xffu5
>>>>>
>>>>>
>>>>> One thing to note is that the "link" command didn't work. I had to use
>>>>> 'oc secrets add default docker-lab --for=pull'
>>>>>
>>>>>
>>>> Can you open an issue it's not working? Either docs should be updated
>>>> or code fixed.
>>>>
>>>>
>>>>>
>>>>>
>>>>>
>>>> Does it need to be added to a different service account? Here are the
>>>>> accounts that currently exist:
>>>>>
>>>>> [root@os-master ~]# oc get sa
>>>>> NAME SECRETS AGE
>>>>> builder 2 1d
>>>>> default 2 1d
>>>>> deployer 2 1d
>>>>>
>>>>> On Wed, Aug 10, 2016 at 10:09 AM, Maciej Szulik <[email protected]>
>>>>> wrote:
>>>>>
>>>>>>
>>>>>>
>>>>>> On Wed, Aug 10, 2016 at 3:59 PM, Cesar Wong <[email protected]>
>>>>>> wrote:
>>>>>>
>>>>>>> Hi Tony,
>>>>>>>
>>>>>>> Sorry for over-complicating it then :)
>>>>>>>
>>>>>>> Using the image stream name is the right thing to do. However,
>>>>>>> new-app won't include the pull secret in the deployment config that it
>>>>>>> generates. So you have to specify it manually by editing the generated
>>>>>>> dc
>>>>>>>
>>>>>>> Unless, (Maciej, you'd know better than me) there is some magic that
>>>>>>> the deployer uses to figure out the right secret to use.
>>>>>>>
>>>>>>>
>>>>>> You need to provide the secrets as described here:
>>>>>> https://docs.openshift.org/latest/dev_guide/managing_images.
>>>>>> html#allowing-pods-to-reference-images-from-other-secured-registries
>>>>>>
>>>>>>
>>>>>>>
>>>>>>> On Aug 10, 2016, at 9:47 AM, Tony Saxon <[email protected]>
>>>>>>> wrote:
>>>>>>>
>>>>>>> Thanks Cesar, but actually Maciej had it right. I'm trying to use a
>>>>>>> preexisting private docker registry as the source of the image. The
>>>>>>> preexisting registry is tied in with our current CI system, so my
>>>>>>> ultimate
>>>>>>> goal is to use an image from that repository as the source for an app in
>>>>>>> Openshift for a continuous deployment system.
>>>>>>>
>>>>>>> I went and did the import and it imported successfully:
>>>>>>>
>>>>>>> # oc import-image testwebapp --confirm --from=
>>>>>>> docker-lab.example.com:5000/testwebapp:latest
>>>>>>> The import completed successfully.
>>>>>>>
>>>>>>> Name: testwebapp
>>>>>>> Created: 1 seconds ago
>>>>>>> Labels: <none>
>>>>>>> Annotations: openshift.io/image.dockerRepos
>>>>>>> itoryCheck=2016-08-10T13:26:01Z
>>>>>>> Docker Pull Spec: 172.30.11.167:5000/testwebapp/testwebapp
>>>>>>>
>>>>>>> Tag Spec
>>>>>>> Created PullSpec
>>>>>>> Image
>>>>>>> latest docker-lab.example.com:5000/testwebapp:latest 1 seconds
>>>>>>> ago docker-lab.example.com:5000/testwebapp@sha256:9799a25cd6fd7f...
>>>>>>> <same>
>>>>>>>
>>>>>>> # oc get is
>>>>>>> NAME DOCKER REPO TAGS
>>>>>>> UPDATED
>>>>>>> testwebapp 172.30.11.167:5000/testwebapp/testwebapp latest 6
>>>>>>> seconds ago
>>>>>>>
>>>>>>> I'm a little confused as to how to then deploy this as a new app. I
>>>>>>> tried running the same 'oc new-app' command as I was running previously,
>>>>>>> but it gave an error about an imagestream 'testwebapp' already
>>>>>>> existing. I
>>>>>>> then tried to run just 'oc new-app testwebapp' and it still gives an
>>>>>>> error
>>>>>>> in the pod about not being able to pull the image. I also tried 'oc
>>>>>>> new-app
>>>>>>> 172.30.11.167:5000/testwebapp/testwebapp' which gave an error about
>>>>>>> no match.
>>>>>>>
>>>>>>> On Wed, Aug 10, 2016 at 6:40 AM, Cesar Wong <[email protected]>
>>>>>>> wrote:
>>>>>>>
>>>>>>>> Maciej,
>>>>>>>>
>>>>>>>> In this case, Tony is trying to connect to the OpenShift registry,
>>>>>>>> so the secret should exist; the dockercfg secret for the project's
>>>>>>>> default
>>>>>>>> service account.
>>>>>>>>
>>>>>>>> Tony, two things that may be your issue:
>>>>>>>>
>>>>>>>> 1) You're using a route for your registry (docker-lab.example.net).
>>>>>>>> The dockercfg secret will likely only have an entry for the ip address
>>>>>>>> of
>>>>>>>> the registry and not the route. (Maciej, maybe you know of a way to
>>>>>>>> get the
>>>>>>>> secrets to include an entry for the host of the route). Otherwise,
>>>>>>>> you're
>>>>>>>> better off specifying the service ip when invoking new-app.
>>>>>>>>
>>>>>>>> You can check what hosts are included in the dockercfg secret by
>>>>>>>> doing 'oc describe secret/default-dockercfg-XXXX' where XXXX is
>>>>>>>> whatever
>>>>>>>> suffix is used in your project.
>>>>>>>>
>>>>>>>> 2) The image ref that you're using in your new-app invocation
>>>>>>>> doesn't include a namespace. All images on the OpenShift registry will
>>>>>>>> have
>>>>>>>> a namespace and name like:
>>>>>>>> [registry-host]:[port]/projectname/testwebapp:latest. Make sure
>>>>>>>> you have the full spec for the image (from 'oc get is').
>>>>>>>>
>>>>>>>> On Aug 10, 2016, at 5:44 AM, Maciej Szulik <[email protected]>
>>>>>>>> wrote:
>>>>>>>>
>>>>>>>> You need to follow the docs here: https://docs.openshift.org/lat
>>>>>>>> est/dev_guide/managing_images.html#private-registries
>>>>>>>> to setup the secret in the same project your ImageStream is created
>>>>>>>> and then re-import the image.
>>>>>>>> During import proper secrets will be picked automatically based on
>>>>>>>> the urls of the registry and your image metadata
>>>>>>>> should be downloaded to the server. This will handle the import
>>>>>>>> part, now for actually using an image from private
>>>>>>>> registry you need to follow this: https://docs.openshift.org/lat
>>>>>>>> est/dev_guide/managing_images.html#allowing-pods-to-referenc
>>>>>>>> e-images-from-other-secured-registries
>>>>>>>>
>>>>>>>> Hope that helps,
>>>>>>>> Maciej
>>>>>>>>
>>>>>>>> On Tue, Aug 9, 2016 at 4:00 PM, Tony Saxon <[email protected]>
>>>>>>>> wrote:
>>>>>>>>
>>>>>>>>> I'm not sure what I'm missing here. I have a private docker
>>>>>>>>> registry that is set up securely and uses authentication. I followed
>>>>>>>>> the
>>>>>>>>> docs at https://docs.openshift.org/lat
>>>>>>>>> est/dev_guide/managing_images.html#using-image-pull-secrets to
>>>>>>>>> create the secret with the username and password to authenticate with
>>>>>>>>> the
>>>>>>>>> docker registry. I verified that I can manually login to the docker
>>>>>>>>> registry from the master and the nodes. However, when I go to deploy
>>>>>>>>> a new
>>>>>>>>> app based on an image from the docker registry it seem to be failing
>>>>>>>>> to
>>>>>>>>> authenticate. The command that I'm running to create the new app:
>>>>>>>>>
>>>>>>>>> oc new-app docker-lab.example.net:5000/testwebapp:latest
>>>>>>>>>
>>>>>>>>> It creates the imagestream and attempts to deploy the pod. I get
>>>>>>>>> the following in the logs on the pod:
>>>>>>>>>
>>>>>>>>> # oc logs testwebapp-1-us1wu
>>>>>>>>> Error from server: container "testwebapp" in pod
>>>>>>>>> "testwebapp-1-us1wu" is waiting to start: image can't be pulled
>>>>>>>>>
>>>>>>>>> The logs on the docker registry show:
>>>>>>>>>
>>>>>>>>> time="2016-08-09T13:54:45Z" level=warning msg="error authorizing
>>>>>>>>> context: basic authentication challenge for realm \"Registry Realm\":
>>>>>>>>> invalid authorization credential" go.version=go1.6.3
>>>>>>>>> http.request.host="
>>>>>>>>> docker-lab.example.net:5000"
>>>>>>>>> http.request.id=f5aeb8b9-ce4e-41b7-86a8-76e8c520bd22
>>>>>>>>> http.request.method=GET http.request.remoteaddr="192.1
>>>>>>>>> 68.122.158:54436" http.request.uri="/v2/"
>>>>>>>>> http.request.useragent="docker/1.10.3 go/go1.4.2
>>>>>>>>> git-commit/9419b24-unsupported kernel/3.10.0-327.22.2.el7.x86_64
>>>>>>>>> os/linux arch/amd64" instance.id=f0d70491-6e34-44eb-a51c-3b13eae8daa6
>>>>>>>>> version=v2.5.0
>>>>>>>>> 192.168.122.158 - - [09/Aug/2016:13:54:45 +0000] "GET /v2/
>>>>>>>>> HTTP/1.1" 401 87 "" "docker/1.10.3 go/go1.4.2
>>>>>>>>> git-commit/9419b24-unsupported kernel/3.10.0-327.22.2.el7.x86_64
>>>>>>>>> os/linux arch/amd64"
>>>>>>>>> time="2016-08-09T13:54:45Z" level=error msg="response completed
>>>>>>>>> with error" auth.user.name=tsaxon err.code="manifest unknown"
>>>>>>>>> err.detail="unknown manifest name=testwebapp
>>>>>>>>> revision=sha256:9799a25cd6fd7f
>>>>>>>>> 7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3"
>>>>>>>>> err.message="manifest unknown" go.version=go1.6.3 http.request.host="
>>>>>>>>> docker-lab.example.net:5000"
>>>>>>>>> http.request.id=130a9014-7c19-48f7-bef3-2b8cfe0470a0
>>>>>>>>> http.request.method=GET http.request.remoteaddr="192.1
>>>>>>>>> 68.122.158:54438" http.request.uri="/v2/testweba
>>>>>>>>> pp/manifests/sha256:9799a25cd6fd7f7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3"
>>>>>>>>> http.request.useragent="docker/1.10.3 go/go1.4.2
>>>>>>>>> git-commit/9419b24-unsupported kernel/3.10.0-327.22.2.el7.x86_64
>>>>>>>>> os/linux arch/amd64" http.response.contenttype="application/json;
>>>>>>>>> charset=utf-8" http.response.duration=6.174905ms
>>>>>>>>> http.response.status=404 http.response.written=186 instance.id
>>>>>>>>> =f0d70491-6e34-44eb-a51c-3b13eae8daa6 vars.name=testwebapp
>>>>>>>>> vars.reference="sha256:9799a25cd6fd7f7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3"
>>>>>>>>> version=v2.5.0
>>>>>>>>> 192.168.122.158 - - [09/Aug/2016:13:54:45 +0000] "GET
>>>>>>>>> /v2/testwebapp/manifests/sha256:9799a25cd6fd7f7908bad740fc0c
>>>>>>>>> 85823e38aa22afb22f687a5b8a3ed2bf9ec3 HTTP/1.1" 404 186 ""
>>>>>>>>> "docker/1.10.3 go/go1.4.2 git-commit/9419b24-unsupported
>>>>>>>>> kernel/3.10.0-327.22.2.el7.x86_64 os/linux arch/amd64"
>>>>>>>>> time="2016-08-09T13:54:45Z" level=warning msg="error authorizing
>>>>>>>>> context: basic authentication challenge for realm \"Registry Realm\":
>>>>>>>>> invalid authorization credential" go.version=go1.6.3
>>>>>>>>> http.request.host="
>>>>>>>>> docker-lab.example.net:5000"
>>>>>>>>> http.request.id=0185e07b-f1c1-48e6-91ea-dede2339f087
>>>>>>>>> http.request.method=GET http.request.remoteaddr="192.1
>>>>>>>>> 68.122.158:54440" http.request.uri="/v2/"
>>>>>>>>> http.request.useragent="docker/1.10.3 go/go1.4.2
>>>>>>>>> git-commit/9419b24-unsupported kernel/3.10.0-327.22.2.el7.x86_64
>>>>>>>>> os/linux arch/amd64" instance.id=f0d70491-6e34-44eb-a51c-3b13eae8daa6
>>>>>>>>> version=v2.5.0
>>>>>>>>> 192.168.122.158 - - [09/Aug/2016:13:54:45 +0000] "GET /v2/
>>>>>>>>> HTTP/1.1" 401 87 "" "docker/1.10.3 go/go1.4.2
>>>>>>>>> git-commit/9419b24-unsupported kernel/3.10.0-327.22.2.el7.x86_64
>>>>>>>>> os/linux arch/amd64"
>>>>>>>>> time="2016-08-09T13:54:46Z" level=error msg="response completed
>>>>>>>>> with error" auth.user.name=tsaxon err.code="manifest unknown"
>>>>>>>>> err.detail="unknown manifest name=testwebapp
>>>>>>>>> revision=sha256:9799a25cd6fd7f
>>>>>>>>> 7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3"
>>>>>>>>> err.message="manifest unknown" go.version=go1.6.3 http.request.host="
>>>>>>>>> docker-lab.example.net:5000"
>>>>>>>>> http.request.id=c1ab0cd7-42ac-4fef-b2c4-0f451976e302
>>>>>>>>> http.request.method=GET http.request.remoteaddr="192.1
>>>>>>>>> 68.122.158:54442" http.request.uri="/v2/testweba
>>>>>>>>> pp/manifests/sha256:9799a25cd6fd7f7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3"
>>>>>>>>> http.request.useragent="docker/1.10.3 go/go1.4.2
>>>>>>>>> git-commit/9419b24-unsupported kernel/3.10.0-327.22.2.el7.x86_64
>>>>>>>>> os/linux arch/amd64" http.response.contenttype="application/json;
>>>>>>>>> charset=utf-8" http.response.duration=6.28913ms
>>>>>>>>> http.response.status=404 http.response.written=186 instance.id
>>>>>>>>> =f0d70491-6e34-44eb-a51c-3b13eae8daa6 vars.name=testwebapp
>>>>>>>>> vars.reference="sha256:9799a25cd6fd7f7908bad740fc0c85823e38aa22afb22f687a5b8a3ed2bf9ec3"
>>>>>>>>> version=v2.5.0
>>>>>>>>> 192.168.122.158 - - [09/Aug/2016:13:54:46 +0000] "GET
>>>>>>>>> /v2/testwebapp/manifests/sha256:9799a25cd6fd7f7908bad740fc0c
>>>>>>>>> 85823e38aa22afb22f687a5b8a3ed2bf9ec3 HTTP/1.1" 404 186 ""
>>>>>>>>> "docker/1.10.3 go/go1.4.2 git-commit/9419b24-unsupported
>>>>>>>>> kernel/3.10.0-327.22.2.el7.x86_64 os/linux arch/amd64"
>>>>>>>>>
>>>>>>>>> Here are the service accounts showing that they have the image
>>>>>>>>> pull secret added (docker-lab):
>>>>>>>>>
>>>>>>>>> [root@os-master ~]# oc get serviceaccounts
>>>>>>>>> NAME SECRETS AGE
>>>>>>>>> builder 3 21h
>>>>>>>>> default 2 21h
>>>>>>>>> deployer 3 21h
>>>>>>>>> [root@os-master ~]# oc describe serviceaccounts default
>>>>>>>>> Name: default
>>>>>>>>> Namespace: testwebapp
>>>>>>>>> Labels: <none>
>>>>>>>>>
>>>>>>>>> Image pull secrets: default-dockercfg-pfota
>>>>>>>>> eip-docker
>>>>>>>>> docker-lab
>>>>>>>>>
>>>>>>>>> Mountable secrets: default-token-xffu5
>>>>>>>>> default-dockercfg-pfota
>>>>>>>>>
>>>>>>>>> Tokens: default-token-vbcmc
>>>>>>>>> default-token-xffu5
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> [root@os-master ~]# oc describe serviceaccounts builder
>>>>>>>>> Name: builder
>>>>>>>>> Namespace: testwebapp
>>>>>>>>> Labels: <none>
>>>>>>>>>
>>>>>>>>> Image pull secrets: builder-dockercfg-7bjoo
>>>>>>>>> docker-lab
>>>>>>>>>
>>>>>>>>> Mountable secrets: builder-token-wf31u
>>>>>>>>> builder-dockercfg-7bjoo
>>>>>>>>> eip-docker
>>>>>>>>>
>>>>>>>>> Tokens: builder-token-gi9o9
>>>>>>>>> builder-token-wf31u
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> [root@os-master ~]# oc describe serviceaccounts deployer
>>>>>>>>> Name: deployer
>>>>>>>>> Namespace: testwebapp
>>>>>>>>> Labels: <none>
>>>>>>>>>
>>>>>>>>> Image pull secrets: deployer-dockercfg-lfiuw
>>>>>>>>> docker-lab
>>>>>>>>>
>>>>>>>>> Mountable secrets: deployer-token-9euo2
>>>>>>>>> deployer-dockercfg-lfiuw
>>>>>>>>> eip-docker
>>>>>>>>>
>>>>>>>>> Tokens: deployer-token-9euo2
>>>>>>>>> deployer-token-mq6vw
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Not sure what I could be missing.
>>>>>>>>>
>>>>>>>>> _______________________________________________
>>>>>>>>> users mailing list
>>>>>>>>> [email protected]
>>>>>>>>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>>>>>>>>>
>>>>>>>>>
>>>>>>>> _______________________________________________
>>>>>>>> users mailing list
>>>>>>>> [email protected]
>>>>>>>> http://lists.openshift.redhat.com/openshiftmm/listinfo/users
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users