Skip to content

Use auth from /etc/foreman/registry-auth.json when pulling containers#1076

Merged
stejskalleos merged 1 commit intomasterfrom
pull-auth
Mar 20, 2026
Merged

Use auth from /etc/foreman/registry-auth.json when pulling containers#1076
stejskalleos merged 1 commit intomasterfrom
pull-auth

Conversation

@evgeni
Copy link
Copy Markdown
Member

@evgeni evgeni commented Mar 18, 2026

to test this:

  • deploy 6.18
  • podman login registry.redhat.io --authfile /etc/foreman/registry-auth.json …
  • satellite-installer --enable-iop

test that it's really failing

[root@sat ~]# foreman-maintain update run
…
Update IoP containers:                                                [FAIL]
Failed executing podman pull registry.redhat.io/satellite/iop-insights-engine-rhel9:6.18, exit status 125:
 Trying to pull registry.redhat.io/satellite/iop-insights-engine-rhel9:6.18...
Error: unable to copy from source docker://registry.redhat.io/satellite/iop-insights-engine-rhel9:6.18: initializing source docker://registry.redhat.io/satellite/iop-insights-engine-rhel9:6.18: unable to retrieve auth token: invalid username/password: unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: https://access.redhat.com/RegistryAuthentication
--------------------------------------------------------------------------------
Scenario [Procedures before migrating] failed.

The following steps ended up in failing state:

  [iop-update]

Resolve the failed steps and rerun the command.

If the situation persists and, you are unclear what to do next,
contact Red Hat Technical Support.

In case the failures are false positives, use
--whitelist="iop-update"

after the patch:

[root@sat ~]# foreman-maintain update run
…
Update IoP containers:                                                [OK]

@stejskalleos stejskalleos self-assigned this Mar 20, 2026
Copy link
Copy Markdown

@stejskalleos stejskalleos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

rpm -qi satellite
Name        : satellite
Version     : 6.18.4

cat /etc/redhat-release 
Red Hat Enterprise Linux release 9.7 (Plow)

Issue is reproducible:

satellite-maintain update run --whitelist="repositories-validate,check-non-redhat-repository"

Update IoP containers:                                                [FAIL]
Failed executing podman pull registry.redhat.io/satellite/iop-insights-engine-rhel9:6.18, exit status 125:
 Trying to pull registry.redhat.io/satellite/iop-insights-engine-rhel9:6.18...
Error: unable to copy from source docker://registry.redhat.io/satellite/iop-insights-engine-rhel9:6.18: initializing source docker://registry.redhat.io/satellite/iop-insights-engine-rhel9:6.18: unable to retrieve auth token: invalid username/password: unauthorized: Please login to the Red Hat Registry using your Customer Portal credentials. Further instructions can be found here: https://access.redhat.com/RegistryAuthentication
--------------------------------------------------------------------------------
Scenario [Procedures before migrating] failed.

After the deploy of the fix it works:

dnf install -y rubygem-foreman_maintain-doc-1:1.14.2-1.20260318123913535263.pr1076.2.g639b298.el9.noarch rubygem-foreman_maintain-1:1.14.2-1.20260318123913535263.pr1076.2.g639b298.el9.noarch --disableplugin foreman-protector

satellite-maintain update run --whitelist="repositories-validate,check-non-redhat-repository"

Running Procedures before migrating
================================================================================
Download package(s) :                                                 [OK]
--------------------------------------------------------------------------------
Update IoP containers:                                                [OK]
--------------------------------------------------------------------------------

...

@stejskalleos stejskalleos merged commit 09d8f2d into master Mar 20, 2026
8 checks passed
@stejskalleos stejskalleos deleted the pull-auth branch March 20, 2026 09:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants