Image pull fails with error "Unable to pull image: Get https://cdn02.quay.io..: Forbidden" RHOCP 4

Solution Unverified - Updated -

Issue

After deploying an Operator, the Pod is failing to start and is placed into ImagePullBackoff state.

  • The events are displaying the following message:

    Unable to pull image: Get https://cdn02.quay.io..: Forbidden"
    

    OR

  • The image pull from quay.io is failling due to the redirect to cdn domain, see below:

    Failed to pull image "quay.io/baselibrary/ubuntu:latest": rpc error: code = Unknown desc = reading blob sha256:1ec46f33b12c667b40f541959319150b349a687305aee4f6e02a53c4ed6a765d: Get "https://cdn03.quay.io/sharedimages/a265537a-9deb-4ce0-80e4-9372eee42fc6/layer?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAI5LUAQGPZRPNKSJA%2F20230223%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20230223T181256Z&X-Amz-Expires=600&X-Amz-SignedHeaders=host&X-Amz-Signature=05b038e7bbec3aac942c958db82a8f85184d2fd80fbb0e14d950eeee44ec001b&cf_sign=iH4KH567vsYx5dn8ZOSCIttwuOrnnm0fWO1Can%2FkJi1%2BUQ8aqQxj4%2BOzRBxWSeEzOMFWxDP2C2SAeu2nJP5reoCoPIMclpojccN8zctULqxTWZ9f4fLSI%2BZkFdkqxlbgvEdZLvwkw9AemsqfcOqjwWAxQbLv7qOKm6mAEw0pGV9PfAOiTYvRu6wGrNk1zxyPu9DLgpgokVy30gi2zsOvy74WGO5ez8VJs53hxaPaqhnbzMHX41rX2wIVlES%2BrWc9lVbc2CVwWlBhQdCAJkHXiBXziQli8HxgGN17D8oubQ%2FsEFLjNMOXb9Q1CZaKLzo1C4Qn9ZH%2FcfLAJYd5%2BErBXA%3D%3D&cf_expiry=1677176576®ion=us-east-1"
    

Environment

  • Red Hat OpenShift Container Platform [RHOCP]
    • 4.x
  • Cluster with a Proxy configured

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content