Authentication errors are shown after global pull secret is updated in OCP 4

Solution Verified - Updated -

Issue

  • When the global pull secret is updated as explained in the documentation, the openshift-apiserver does not reflect it.
  • After updating the global pull secret, the oc import-image <images> or oc start-build commands fail with errors similar to the following ones:

    error: tag latest failed: Internal error occurred: registry.redhat.io/rhscl/httpd-24-rhel7:latest: Get https://registry.redhat.io/v2/rhscl/httpd-24-rhel7/manifests/latest: unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: https://access.redhat.com/RegistryAuthentication
    imagestream.image.openshift.io/httpd-24-rhel7 imported with errors
    
    error: tag latest failed: Internal error occurred: my-custom-registry.example.com/jenkins-registry/jenkins-agent-image:latest: Get "https://my-custom-registry.example.com/v2/jenkins-registry/jenkins-agent-image/manifests/latest": unknown: Authentication is required
    imagestream.image.openshift.io/jenkins-agent-image imported with errors
    
  • A correct pull-secret is already configured but it fails to get image stream.

Environment

  • Red Hat Openshift Container Platform (RHOCP)
    • 4.7.4+
    • 4.8
    • 4.9

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content