Skip to content

ipa: fix kube-rbac-proxy image pull failure#3845

Open
xek wants to merge 1 commit intoopenstack-k8s-operators:mainfrom
xek:fix-federation-oscp-patch
Open

ipa: fix kube-rbac-proxy image pull failure#3845
xek wants to merge 1 commit intoopenstack-k8s-operators:mainfrom
xek:fix-federation-oscp-patch

Conversation

@xek
Copy link
Copy Markdown
Contributor

@xek xek commented Apr 13, 2026

Summary

Fixes the LDAP CI job failure in the keystone component pipeline.

  • Job: component-keystone-edpm-rhel9-rhoso18.0-crc-ldap
  • Error: ErrImagePull / ImagePullBackOff for gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0
  • Root cause: The freeipa-operator Deployment includes a kube-rbac-proxy sidecar referencing gcr.io/kubebuilder/kube-rbac-proxy:v0.5.0 which is no longer available (Google Container Registry deprecation)
  • Fix: Override the sidecar image to registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0 via kustomize edit set image during IPA operator installation

Test plan

Related

Assisted-by: Claude Opus 4 (Anthropic)

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Apr 13, 2026

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@xek xek changed the title federation: use oc patch instead of k8s state=patched federation/ipa: fix CI job failures (CRD discovery + image pull) Apr 13, 2026
@xek xek force-pushed the fix-federation-oscp-patch branch 3 times, most recently from 679b170 to 8afcd6e Compare April 13, 2026 20:09
The idm-operator-controller-manager pod has a kube-rbac-proxy
sidecar container that references gcr.io/kubebuilder/kube-rbac-
proxy:v0.5.0. This image is no longer available on gcr.io
(Google Container Registry is being deprecated), causing
ErrImagePull/ImagePullBackOff and preventing the Deployment
from becoming Available.

Replace with registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0
which is the current canonical location.

Assisted-by: Claude Opus 4 (Anthropic)
Change-Id: Idcbff92540f1e6b02463d1a704a80ed3906465e5
Signed-off-by: Grzegorz Grasza <xek@redhat.com>
@xek xek force-pushed the fix-federation-oscp-patch branch from 8afcd6e to 3962e1f Compare April 14, 2026 09:36
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Apr 14, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign afaranha for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@xek xek changed the title federation/ipa: fix CI job failures (CRD discovery + image pull) ipa: fix kube-rbac-proxy image pull failure Apr 14, 2026
@xek xek marked this pull request as ready for review April 14, 2026 10:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant