Pushing images to RHOCP 4 internal registry fails with denied error
Issue
- Pushing an image succeeds in a certain namespace but it fails on a different one.
- Denied error while trying to upload an image to RHOCP integrated registry.
Error copying image to the remote destination: Uploading manifest failed, attempted the following formats: application/vnd.oci.image.manifest.v1+json(Error writing manifest: Error uploading manifest latest to default-route-openshift-image-registry.apps.example.com/project-name/image-name: manifest invalid: manifest invalid), application/vnd.docker.distribution.manifest.v2+json(Error writing manifest: Error uploading manifest latest to default-route-openshift-image-registry.apps.example.com/project-name/image-name: denied), application/vnd.docker.distribution.manifest.v1+prettyjws(Error writing manifest: Error uploading manifest latest to default-route-openshift-image-registry.apps.example.com/project-name/image-name: denied), application/vnd.oci.image.index.v1+json(Error creating an updated image manifest: Conversion of image manifest from application/vnd.oci.image.manifest.v1+json to application/vnd.oci.image.index.v1+json is not implemented), application/vnd.docker.distribution.manifest.list.v2+json(Error creating an updated image manifest: Conversion of image manifest from application/vnd.oci.image.manifest.v1+json to application/vnd.docker.distribution.manifest.list.v2+json is not implemented), application/vnd.docker.distribution.manifest.v1+json(Error writing manifest: Error uploading manifest latest to default-route-openshift-image-registry.apps.example.com/project-name/image-name: denied)
podman pushto the registry gets the following denied error.
$ podman push image-registry.openshift-image-registry.svc:5000/testimage/httpd:latest
Getting image source signatures
Copying blob 031ed75e9ee4 skipped: already exists
Copying blob 36ab00ef4543 skipped: already exists
Copying blob b91a03740d7e skipped: already exists
Copying blob 229a8179a9fe skipped: already exists
Copying blob 917b2b05bf44 skipped: already exists
Copying config 4b7fc736cb done
Writing manifest to image destination
Error: writing manifest: uploading manifest latest to image-registry.openshift-image-registry.svc:5000/testimage/httpd: denied
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
