<div dir="ltr">Hi, in which place I should add DockerInsecureRegistryAddress ? <div>In which Level? I have added in 2 levels</div><div><span style="font-family:monospace"><span style="color:rgb(0,0,0)">parameter_defaults:
</span><br> ContainerImagePrepare:
<br> - DockerInsecureRegistryAddress: <a href="http://harbor.vgtu.lt">harbor.vgtu.lt</a>
<br> set:
<br> ceph_alertmanager_image: alertmanager
<br> ceph_alertmanager_namespace: <a href="http://harbor.vgtu.lt/prom">harbor.vgtu.lt/prom</a>
<br> ceph_alertmanager_tag: v0.16.2
<br> ceph_grafana_image: grafana
<br> ceph_grafana_namespace: <a href="http://harbor.vgtu.lt/grafana">harbor.vgtu.lt/grafana</a>
<br> ceph_grafana_tag: 5.4.3
<br> ceph_image: daemon
<br> ceph_namespace: <a href="http://harbor.vgtu.lt/ceph">harbor.vgtu.lt/ceph</a>
<br> ceph_node_exporter_image: node-exporter
<br> ceph_node_exporter_namespace: <a href="http://harbor.vgtu.lt/prom">harbor.vgtu.lt/prom</a>
<br> ceph_node_exporter_tag: v0.17.0
<br> ceph_prometheus_image: prometheus
<br> ceph_prometheus_namespace: <a href="http://harbor.vgtu.lt/prom">harbor.vgtu.lt/prom</a>
<br> ceph_prometheus_tag: v2.7.2
<br> ceph_tag: v4.0.12-stable-4.0-nautilus-centos-7-x86_64
<br> default_tag: true
<br> name_prefix: centos-binary-
<br> name_suffix: ''
<br> namespace: <a href="http://harbor.vgtu.lt/testukas">harbor.vgtu.lt/testukas</a>
<br> insecure: true
<br> DockerInsecureRegistryAddress: <a href="http://harbor.vgtu.lt">harbor.vgtu.lt</a>
<br> neutron_driver: ovn
<br> rhel_containers: false
<br> tag: current-tripleo
<br> tag_from_label: rdo_version<br></span></div><div><span style="font-family:monospace"><br></span></div><div><span style="font-family:monospace">And I have launched tcpdump with filter: host <a href="http://harbor.vgtu.lt">harbor.vgtu.lt</a> and port 80 and I do not receive any.</span></div><div><span style="font-family:monospace">Also it is in undercloud.conf insecure list (first and last one, twice :) and it is in registries.conf in /etc/containers</span></div><div><span style="font-family:monospace"><br></span></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 6 Oct 2020 at 16:09, Alex Schultz <<a href="mailto:aschultz@redhat.com">aschultz@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Tue, Oct 6, 2020 at 1:15 AM Ruslanas Gžibovskis <<a href="mailto:ruslanas@lpic.lt" target="_blank">ruslanas@lpic.lt</a>> wrote:<br>
><br>
> Hi all,<br>
><br>
> I have been trying to use containers from local container image repo which is insecure, but it is always trying to use TLS version, and I do not have https there. even if I would have, I would not have CERT signed, so still it is insecure. It is always trying to access over WWW:443.<br>
><br>
> my registries.conf [1] and I am able to fetch image from the registry [1] and my container image prepare file contains updated repos, I have even added insecure: true<br>
><br>
> any tips? I am following [2] and [3]<br>
><br>
<br>
Use DockerInsecureRegistryAddress to configure the list of insecure<br>
registries. You can include this in the container image prepare file.<br>
If you are using push_destination: true, be sure to add the undercloud<br>
in there by default. We have logic to magically add this if<br>
DockerInsecureRegistryAddress is not configured and push_destination:<br>
true is set. It'll configure the local ip and an undercloud ctlplane<br>
host name as well.<br>
<br>
Unfortunately docker/podman always attempt https first and fallback to<br>
http if not available (this can get weird). If the host is not in the<br>
insecure list, it won't fall back to http.<br>
<br>
> [1] <a href="http://paste.openstack.org/show/cYQM2k77bIh14Zzr5Kjn/" rel="noreferrer" target="_blank">http://paste.openstack.org/show/cYQM2k77bIh14Zzr5Kjn/</a><br>
> [2] <a href="https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/deployment/container_image_prepare.html" rel="noreferrer" target="_blank">https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/deployment/container_image_prepare.html</a><br>
> [3] <a href="https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.0/html/transitioning_to_containerized_services/installing-an-undercloud-with-containers" rel="noreferrer" target="_blank">https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.0/html/transitioning_to_containerized_services/installing-an-undercloud-with-containers</a><br>
><br>
><br>
><br>
> --<br>
> Ruslanas Gžibovskis<br>
> +370 6030 7030<br>
<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div>Ruslanas Gžibovskis<br>+370 6030 7030<br></div></div></div>