Issue in RHACS scanning of Openshift internal registry images using API or roxctl

Solution Verified - Updated -

Issue

  • Image scanning not working with API calls v1/images/scan. While one of the API calls works with an image present inside the openshift namespace, a similar API call for an image in a different namespace doesn't work and fails on Error 401.
"error": "image enrichment error: error getting metadata for image: image-registry.openshift-image-registry.svc.cluster.local:5000/$project/$image:$tag error: getting metadata from registry: \"Autogenerated https://image-registry.openshift-image-registry.svc.cluster.local:5000 for cluster "my-cluster"\": Failed to get the manifest digest : Head \"https://image-registry.openshift-image-registry.svc.cluster.local:5000/v2/$project/$image:$tag\": http: non-successful response (status=401 body=\"\")", "code": 13
  • Why API call for the scan is not working outside the openshift namespace?

Environment

  • Red Hat OpenShift Container Platform 4.x
  • Red Hat Advance Cluster Security 3.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content