{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/openshift-ansible/issues/6598","repository_url":"https://api.github.com/repos/openshift/openshift-ansible","labels_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/6598/labels{/name}","comments_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/6598/comments","events_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/6598/events","html_url":"https://github.com/openshift/openshift-ansible/pull/6598","id":285808293,"number":6598,"title":"Revert #5148 - hosted registry cannot talk to API when proxy is set","user":{"login":"davidaah","id":17261662,"avatar_url":"https://avatars2.githubusercontent.com/u/17261662?v=4","gravatar_id":"","url":"https://api.github.com/users/davidaah","html_url":"https://github.com/davidaah","followers_url":"https://api.github.com/users/davidaah/followers","following_url":"https://api.github.com/users/davidaah/following{/other_user}","gists_url":"https://api.github.com/users/davidaah/gists{/gist_id}","starred_url":"https://api.github.com/users/davidaah/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davidaah/subscriptions","organizations_url":"https://api.github.com/users/davidaah/orgs","repos_url":"https://api.github.com/users/davidaah/repos","events_url":"https://api.github.com/users/davidaah/events{/privacy}","received_events_url":"https://api.github.com/users/davidaah/received_events","type":"User","site_admin":false},"labels":[{"id":696742997,"url":"https://api.github.com/repos/openshift/openshift-ansible/labels/needs-ok-to-test","name":"needs-ok-to-test","color":"b60205","default":false},{"id":681664198,"url":"https://api.github.com/repos/openshift/openshift-ansible/labels/size/XS","name":"size/XS","color":"009900","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2018-01-03T21:02:46Z","updated_at":"2018-02-12T19:41:17Z","closed_at":"2018-02-12T19:41:17Z","author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/openshift/openshift-ansible/pulls/6598","html_url":"https://github.com/openshift/openshift-ansible/pull/6598","diff_url":"https://github.com/openshift/openshift-ansible/pull/6598.diff","patch_url":"https://github.com/openshift/openshift-ansible/pull/6598.patch"},"body":"When PROXY is set in `hosted` registry , the registry cannot talk to the kubernetes master API by IP address (since it isn't in no_proxy) returning a 503\r\n\r\nFrom the logs:\r\n\r\n```\r\n192.168.104.1 - - [03/Jan/2018:19:56:00 +0000] \"GET /openshift/token?account=serviceaccount&scope=repository%3Atest-http-dh%2Fhttpd-ex%3Apush%2Cpull HTTP/1.1\" 401 0 \"\" \"docker/1.12.6 go/go1.8.3 kernel/3.10.0-693.5.2.el7.x86_64 os/linux arch/amd64 UpstreamClient(go-dockerclient)\"\r\ntime=\"2018-01-03T19:57:00.095021815Z\" level=debug msg=\"invalid token: Get https://192.168.128.1:443/apis/user.openshift.io/v1/users/~: Service Unavailable\" go.version=go1.8.3 http.request.host=\"docker-registry.default.svc:5000\" http.request.id=2049fd4b-742f-4001-ab8a-a92173258c17 http.request.method=GET http.request.remoteaddr=\"192.168.104.1:41522\" http.request.uri=\"/openshift/token?account=serviceaccount&scope=repository%3Atest-http-dh%2Fhttpd-ex%3Apush%2Cpull\" http.request.useragent=\"docker/1.12.6 go/go1.8.3 kernel/3.10.0-693.5.2.el7.x86_64 os/linux arch/amd64 UpstreamClient(go-dockerclient)\" instance.id=24f814aa-ba9e-405c-9db4-94481942b04b openshift.logger=registry\r\n```\r\n\r\nOr directly from the pod:\r\n```\r\nsh-4.2$ curl https://192.168.128.1:443/apis/user.openshift.io/v1/users/~\r\ncurl: (56) Received HTTP code 503 from proxy after CONNECT\r\n```\r\n\r\nRemoving these environment variables from the hosted registry DC immediately resolves connectivity to the masters/API and pushes succeed.\r\n\r\nI am not certain under what circumstances the hosted-registry needs outbound connectivity.. if it does then likely the only way to fix this and enable that outbound access would be to dynamically add the IPs of the masters to the no_proxy (since ranges are not supported) or to hit the masters by an dns name and not via the IP\r\n \r\n**Bugzilla Reference**: https://bugzilla.redhat.com/show_bug.cgi?id=1544073"},"comment":{"url":"https://api.github.com/repos/openshift/openshift-ansible/issues/comments/365038373","html_url":"https://github.com/openshift/openshift-ansible/pull/6598#issuecomment-365038373","issue_url":"https://api.github.com/repos/openshift/openshift-ansible/issues/6598","id":365038373,"user":{"login":"davidaah","id":17261662,"avatar_url":"https://avatars2.githubusercontent.com/u/17261662?v=4","gravatar_id":"","url":"https://api.github.com/users/davidaah","html_url":"https://github.com/davidaah","followers_url":"https://api.github.com/users/davidaah/followers","following_url":"https://api.github.com/users/davidaah/following{/other_user}","gists_url":"https://api.github.com/users/davidaah/gists{/gist_id}","starred_url":"https://api.github.com/users/davidaah/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davidaah/subscriptions","organizations_url":"https://api.github.com/users/davidaah/orgs","repos_url":"https://api.github.com/users/davidaah/repos","events_url":"https://api.github.com/users/davidaah/events{/privacy}","received_events_url":"https://api.github.com/users/davidaah/received_events","type":"User","site_admin":false},"created_at":"2018-02-12T19:41:17Z","updated_at":"2018-02-12T19:41:17Z","author_association":"NONE","body":"Fix is being pushed through to add the kube api svc ip to the NO_PROXY list\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1511870"}}
{"actor":{"display_login":"davidaah"}}