From 7403d9a3361e6c41c21b474f2d6732c5e2e046a2 Mon Sep 17 00:00:00 2001 From: David Sariel Date: Mon, 22 Jun 2026 05:00:10 +0300 Subject: [PATCH] [openshift_setup] pre-pull RBAC proxy images on master nodes When digest mirrors are configured, optionally pre-pull any RBAC proxy images found in the mirror list on all master nodes. This avoids pull failures at workload deployment time when the cluster cannot reach the original registry directly. The feature is controlled by cifmw_openshift_setup_prepull_rbac_images (default: true) and is skipped when no digest mirrors are defined or when no mirrors match the RBAC proxy image pattern. Each image is pulled via oc debug node using the node's existing kubelet auth credentials. Failures are non-fatal and a summary of successful pulls is logged at the end. Signed-off-by: David Sariel dsariel@redhat.com ANVIL-142 --- roles/openshift_setup/tasks/configure_registries.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/roles/openshift_setup/tasks/configure_registries.yml b/roles/openshift_setup/tasks/configure_registries.yml index 6c3123c02..5b70009f4 100644 --- a/roles/openshift_setup/tasks/configure_registries.yml +++ b/roles/openshift_setup/tasks/configure_registries.yml @@ -37,6 +37,13 @@ - "{{ cifmw_update_containers_registry }}" allowedRegistries: "{{ all_registries }}" +- name: Print cifmw_openshift_setup_digest_mirrors value + ansible.builtin.debug: + msg: + - "Defined: {{ cifmw_openshift_setup_digest_mirrors is defined }}" + - "Type: {{ cifmw_openshift_setup_digest_mirrors | type_debug }}" + - "Value: {{ cifmw_openshift_setup_digest_mirrors | default('UNDEFINED') }}" + - name: Create ImageDigestMirrorSet repository digest mirrors when: - cifmw_openshift_setup_digest_mirrors is defined