Pull Failures on registry.redhat.io

Incident Report for Red Hat

Resolved

On 2024-12-13 an issue was identified that impacted OpenShift clusters configured with proxy settings. During this time there were failures in pulling container images due to a "Forbidden" error. As a part of a backend transition, the image signature verification process was misconfigured to redirect to catalog.redhat.com. This domain is not currently documented as a requirement in the OpenShift firewall configuration guide and as a result proxy configurations that do not explicitly allow access to catalog.redhat.com blocked the request causing image pulls to fail.

This configuration has been corrected and pulls to registry.redhat.io have been restored.

Posted Dec 13, 2024 - 14:30 EST