DKP 2.2.0 Added support for Air Gap deployments and as part of that we supply air gap bundles containing the docker images required to deploy Konvoy, Kommander and Insights. When trying to push the Konvoy image bundle to your local docker registry, you may encounter the following error:
./dkp push image-bundle --image-bundle konvoy-image-bundle.tar.gz --to-registry $DOCKER_REGISTRY_ADDRESS --to-registry-username testuser --to-registry-password testpassword
✗ Copying public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v3.1.0-eks-1-18-13 (from bundle) to nexus-registry.daclusta:5000/eks-distro/kubernetes-csi/external-attacher:v3.1.0-eks-1-18-13
---skopeo stdout---:
Getting image list signatures
Copying 1 of 1 images in list
Copying image sha256:e3c649bbe70b30780b41e26c898111e68ef71dfd1c50905cc157be56c29da541 (1/1)
Getting image source signatures
Copying blob sha256:21555aacd050536511fab4de2247d48d0b0a9464cb3dd2cde9d244a655a10914
Copying blob sha256:745e7806748efa0a332a0b2badf2d6c8ed3cfda3f1c662fc8fca07479cc891ef
Copying blob sha256:8b8a142162d22658bdf0283afcd00a9dd216c6637943ffe5f2ba53c4e3da0bd9
Copying blob sha256:0c8a9cf0b21a004493d69756a05f7817c420ada531f637355aaaad22e29b37e8
Copying blob sha256:df77b6a157db16c4e593f199534f0d69eee5b6070497990e597f6b4fa77b2621
Copying config sha256:ae4b806b346bdfc91c61276fe0ab7ed3da0fcf7fbbec5a3855c2197579fd2aae
Writing manifest to image destination
Storing signatures
Writing manifest list to image destination
---skopeo stderr---:
time="2022-05-28T09:01:42-04:00" level=fatal msg="Manifest list must be converted to type \"application/vnd.docker.distribution.manifest.list.v2+json\" to be written to destination, but we cannot modify it: \"Instructed to preserve digests\""
This specific error indicates that your choice of registry software is out of date or incompatible with the OCI image format in use for a variety of images that need to be updated.
JFrog Artifactory
If you use Jfrog Artifactory or Jfrog Container Registry, you must update to a new version of the software. We have confirmed that older versions are not compatible, and Jfrog has not published when they added support for OCI images, but any build newer than version 7.11 will work. We have tested with JCR 7.11.2 and it is able to successfully upload OCI Images.
Nexus Registry
If you use Nexus Registry, there is currently an issue that prevents usage with DKP 2.X and OCI Images. Support for OCI Images was added here:
https://issues.sonatype.org/browse/NEXUS-21087
A new issue was filed here determining that OCI image support is currently broken:
https://issues.sonatype.org/plugins/servlet/mobile#issue/NEXUS-27494
You can track this Jira link for status on a resolution for this issue.
Harbor Registry
We have tested Harbor Registry v2.1.1-5f52168e and any newer version should also support OCI images.