User "system:serviceaccount:NAMESPACE:default" cannot get imagestreams/layers in project "NAMESPACE"

Solution Unverified - Updated -

Issue

  • I am unable to pull images from a namespace using the provided service account.
time="2017-03-24T13:44:25.111035536Z" level=debug msg="authorizing request" go.version=go1.6.3 http.request.host="172.30.2.190:5000" http.request.id=4a22b309-cdb0-408e-a5e1-ca060335de2b http.request.method=GET http.request.remoteaddr="10.1.2.1:45335" http.request.uri="/v2/NAMESPACE/IMAGE/manifests/0.0.2" http.request.useragent="docker/1.10.3 go/go1.6.2 git-commit/5206701-unsupported kernel/3.10.0-327.10.1.el7.x86_64 os/linux arch/amd64" instance.id=0aadc2f1-36b8-4c29-b935-a69104041df4 vars.name="NAMESPACE/IMAGE" vars.reference=0.0.2 
time="2017-03-24T13:44:25.111184117Z" level=debug msg="Origin auth: checking for access to repository:NAMESPACE/IMAGE:pull" go.version=go1.6.3 http.request.host="172.30.2.190:5000" http.request.id=4a22b309-cdb0-408e-a5e1-ca060335de2b http.request.method=GET http.request.remoteaddr="10.1.2.1:45335" http.request.uri="/v2/NAMESPACE/IMAGE/manifests/0.0.2" http.request.useragent="docker/1.10.3 go/go1.6.2 git-commit/5206701-unsupported kernel/3.10.0-327.10.1.el7.x86_64 os/linux arch/amd64" instance.id=0aadc2f1-36b8-4c29-b935-a69104041df4 vars.name="NAMESPACE/IMAGE" vars.reference=0.0.2 
time="2017-03-24T13:44:25.116497945Z" level=error msg="OpenShift access denied: User \"system:serviceaccount:NAMESPACE:default\" cannot get imagestreams/layers in project \"NAMESPACE\"" go.version=go1.6.3 http.request.host="172.30.2.190:5000" http.request.id=4a22b309-cdb0-408e-a5e1-ca060335de2b http.request.method=GET http.request.remoteaddr="10.1.2.1:45335" http.request.uri="/v2/NAMESPACE/IMAGE/manifests/0.0.2" http.request.useragent="docker/1.10.3 go/go1.6.2 git-commit/5206701-unsupported kernel/3.10.0-327.10.1.el7.x86_64 os/linux arch/amd64" instance.id=0aadc2f1-36b8-4c29-b935-a69104041df4 vars.name="NAMESPACE/IMAGE" vars.reference=0.0.2 
time="2017-03-24T13:44:25.116618053Z" level=error msg="error authorizing context: access denied" go.version=go1.6.3 http.request.host="172.30.2.190:5000" http.request.id=4a22b309-cdb0-408e-a5e1-ca060335de2b http.request.method=GET http.request.remoteaddr="10.1.2.1:45335" http.request.uri="/v2/NAMESPACE/IMAGE/manifests/0.0.2" http.request.useragent="docker/1.10.3 go/go1.6.2 git-commit/5206701-unsupported kernel/3.10.0-327.10.1.el7.x86_64 os/linux arch/amd64" instance.id=0aadc2f1-36b8-4c29-b935-a69104041df4 vars.name="NAMESPACE/IMAGE" vars.reference=0.0.2 
10.1.2.1 - - [24/Mar/2017:13:44:25 +0000] "GET /v2/NAMESPACE/IMAGE/manifests/0.0.2 HTTP/1.1" 401 148 "" "docker/1.10.3 go/go1.6.2 git-commit/5206701-unsupported kernel/3.10.0-327.10.1.el7.x86_64 os/linux arch/amd64"

Environment

  • Red Hat OpenShift Container Platform 3.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.