Images not found in Helm OpenShift install

[kevchu3]

Describe the bug

In the documentation on Running Vault on OpenShift, it outlines basic steps to install Vault. However, the deployed pods run into an ImagePullBackOff error because the tags do not match the existing tags hosted on registry.connect.redhat.com.

To Reproduce

Running this basic command from the docs should work:

helm install vault hashicorp/vault \
    --create-namespace \
    --namespace vault \
    --set "global.openshift=true"

It appears the image tags hosted on registry.connect.redhat.com do not match the deployment's tags. The pods return the following ImagePullBackOff error as the expected tags are vault:1.20.4 and vault-k8s:1.7.0.
The vault pod logs:

Failed to pull image "hashicorp/vault:1.20.4": unable to pull image or OCI artifact: pull image err: initializing source docker://registry.connect.redhat.com/hashicorp/vault:1.20.4: reading manifest 1.20.4 in registry.connect.redhat.com/hashicorp/vault: name unknown: Image not found; artifact err: get manifest: build image source: reading manifest 1.20.4 in registry.connect.redhat.com/hashicorp/vault: name unknown: Image not found

The vault-agent-injector pod logs:

Failed to pull image "hashicorp/vault-k8s:1.7.0": unable to pull image or OCI artifact: pull image err: initializing source docker://registry.connect.redhat.com/hashicorp/vault-k8s:1.7.0: reading manifest 1.7.0 in registry.connect.redhat.com/hashicorp/vault-k8s: name unknown: Image not found; artifact err: get manifest: build image source: reading manifest 1.7.0 in registry.connect.redhat.com/hashicorp/vault-k8s: name unknown: Image not found

The available tags for the images are (with a -ubi suffix):

$ skopeo list-tags docker://registry.connect.redhat.com/hashicorp/vault | grep -e "1.20"       
        "1.20.4-ubi",
        "1.20.0-rc2-ubi",
        "1.20.1-ubi",
        "1.20.0-ubi",
        "1.20.2-ubi",
        "1.20.0-rc1-ubi",
        "1.20",
        "1.20.3-ubi",
$ skopeo list-tags docker://registry.connect.redhat.com/hashicorp/vault-k8s | grep -e "1.7"
        "1.7.0-ubi",
        "1.7.2-ubi",
        "1.7.1-ubi",
        "1.7",

Expected behavior

Images should properly pull when this command is executed:

helm install vault hashicorp/vault \
    --create-namespace \
    --namespace vault \
    --set "global.openshift=true"

Environment:

The current version of the Helm chart I'm running is:

$ helm search repo hashicorp/vault   
NAME                            	CHART VERSION	APP VERSION	DESCRIPTION                          
hashicorp/vault                 	0.31.0       	1.20.4     	Official HashiCorp Vault Chart  

[heatherezell]

Since this involves the Helm chart, I'll go ahead and move this to hashicorp/vault-helm. Thanks for the report!

[snecklifter]

We have also hit this in an existing install so had to manually set the image and tag with the -ubi suffix.

We have openshift: true set in the chart.