Images mirrored to Quay can't be pulled in RHOCP

Solution Verified - Updated -

Issue

  • Images are being mirrored into the quay registry using the following command with success.

    $ oc adm catalog mirror <source_registry> <destination_registry> -a ./.dockerconfigjson --insecure
    
  • However, the pod deployment, using that mirrored image, fails with an authentication error:

    Warning  Failed          13s                kubelet            Failed to pull image "<destination_registry>/<repository>/<image>:<tag>": rpc error: code = Unknown desc = reading manifest 1-191a in <destination_registry>/<repository>/<image>:<tag>: unauthorized: access to the requested resource is not authorized
    
  • Is it possible to change the Quay configuration so that the default setting when a new repository is pushed is "public"?

Environment

  • Red Hat Quay
    • 3.x
  • Red Hat OpenShift Container Platform
    • 4.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content