<p>Is there a work around for Openshift to access HTTP only image with Sonatype Nexus proxy?  That's what my team provided for POC Openshift.  You can do podman pull with sslverify false, works fine even inside a pod with podman.  But Openshift can't pull it,</p>
<pre><code>ERROR: Job failed: prepare environment: waiting for pod running: pulling image &quot;domain.ca:5000/gitlab/gitlab-runner-helper:ubi-fips-x86_64-v15.8.2&quot;: image pull failed: rpc error: code = Unknown desc = pinging container registry domain.ca:5000: Get &quot;https://domain.ca:5000/v2/&quot;: http: server gave HTTP response to HTTPS client. Check https://docs.gitlab.com/runner/shells/index.html#shell-profile-loading for more information
</code></pre>
<p>It's looking for <a href="https://domain.ca:5000/v2/" rel="nofollow noreferrer">https://domain.ca:5000/v2/</a> but in reality it's only &quot;http://domain.ca:5000/v2/&quot;.</p>

uniwinux
<p>In OpenShift, Accessing a container registry using HTTPS is the default behavior. You need to add the registry as insecure registry as follows:</p>
<pre><code>apiVersion: config.openshift.io/v1
kind: Image 
metadata:
  annotations:
    release.openshift.io/create-only: &quot;true&quot;
  name: cluster
spec:
  registrySources: 
    insecureRegistries:
    - domain.ca

</code></pre>
<p>You can edit image.config.openshift.io with following command:</p>
<pre><code>$ oc edit image.config.openshift.io/cluster
</code></pre>
<p>*1: <a href="https://docs.openshift.com/container-platform/4.12/openshift_images/image-configuration.html" rel="nofollow noreferrer">https://docs.openshift.com/container-platform/4.12/openshift_images/image-configuration.html</a></p>
