Bug #29742: podman search against katello - Katello - Foreman

Actions

Copy link

Bug #29742

closed

podman search against katello

Added by Justin Sherrill almost 4 years ago. Updated over 3 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Partha Aji

Category:

Target version:

Katello 3.16.0

Difficulty:

Triaged:

Yes

Bugzilla link:

1731229

Pull request:

https://github.com/Katello/katello/pull/8840

Fixed in Releases:

Katello 3.18.0

Found in Releases:

Red Hat JIRA:

Description

Cloned from https://bugzilla.redhat.com/show_bug.cgi?id=1731229

Description of problem:
Tried to do "podman search" on the registry as provided by Satellite.
but getting error " ERRO⁰⁰⁰⁰ error getting search results from v2 endpoint "satellite.example.com:5000", status code 404 (Not Found) "

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. On Satellite server, kept redhat-ubi-images-ubi7 on container
2. Tried to search it with following command but facing issue. # podman search redhat-ubi-images-ubi7

Actual results: [root@vmexample ~]# podman search redhat-ubi-images-ubi7
ERRO⁰⁰⁰⁰ error getting search results from v2 endpoint "syssat65.gsslab.pnq2.redhat.com:5000", status code 404 (Not Found)

Expected results: It should search for image

Additional info:

Actions

Copy link

Updated by James Jeffers almost 4 years ago

Target version set to Katello 4.0.0

Actions

Copy link

Updated by James Jeffers almost 4 years ago

Triaged changed from No to Yes

Actions

Copy link

Updated by Justin Sherrill almost 4 years ago

Subject changed from podman search against Red Hat Satellite 6 fails. to podman search against katello

Actions

Copy link

Updated by James Jeffers almost 4 years ago

Updated with comments, the 2 issues of concern:

podman search with search term when logged in and Lifecycle Environment has 'unauthenticated pull' set to yes
podman search without search term when not logged in (regardless of Lifecycle Environment 'unauthenticated pull' setting)

Actions

Copy link

Updated by James Jeffers almost 4 years ago

Compare this podman sequence using unauthenticated search with a search term:

DEBU[0000] Credentials not found                        
DEBU[0000] Looking for TLS certificates and private keys in /etc/docker/certs.d/centos7-katello-devel-stable.example.com 
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf" 
DEBU[0000] trying to talk to v1 search endpoint         
DEBU[0000] GET https://centos7-katello-devel-stable.example.com/v2/ 
DEBU[0000] Ping https://centos7-katello-devel-stable.example.com/v2/ status 401 
DEBU[0000] GET https://centos7-katello-devel-stable.example.com/v1/search?n=3&q=hello-world 
DEBU[0000] Called search.PersistentPostRunE(podman search --log-level=debug --tls-verify=false --limit=3 centos7-katello-devel-stable.example.com/hello-world)

And then this unauthenticated search without a search term:

DEBU[0000] Credentials not found                        
DEBU[0000] Looking for TLS certificates and private keys in /etc/docker/certs.d/centos7-katello-devel-stable.example.com 
DEBU[0000] Loading registries configuration "/etc/containers/registries.conf" 
DEBU[0000] trying to talk to v2 search endpoint         
DEBU[0000] GET https://centos7-katello-devel-stable.example.com/v2/ 
DEBU[0000] Ping https://centos7-katello-devel-stable.example.com/v2/ status 401 
DEBU[0000] GET https://centos7-katello-devel-stable.example.com/v2/token?service=centos7-katello-devel-stable.example.com 
DEBU[0000] error getting search results from v2 endpoint "centos7-katello-devel-stable.example.com": unable to retrieve auth token: invalid username/password: unauthorized: authentication required 
ERRO[0000] error searching registry "centos7-katello-devel-stable.example.com": couldn't search registry "centos7-katello-devel-stable.example.com": unable to retrieve auth token: invalid username/password: unauthorized: authentication required 
DEBU[0000] Called search.PersistentPostRunE(podman search --log-level=debug --tls-verify=false --limit=3 centos7-katello-devel-stable.example.com/)

In the first case, the following GET after the 401 response is to /v1/search?n=3&q=hello-world

In the second case, the following GET after the 401 response is to /v2/token?service=centos7-katello-devel-stable.example.com

Actions

Copy link