Upstream containers promotion fails with "unauthorized: authentication required" while pulling the images from RDO registry

[Attila Darazs]

failed: [localhost] (item=cinder-backup) => {"failed": true, "item": "cinder-backup", "msg": "Error pulling trunk.registry.rdoproject.org/pike/centos-binary-cinder-backup - code: None message: Get https://trunk.registry.rdoproject.org/v2/pike/centos-binary-cinder-backup/manifests/1e0dd6786e3a4326a37e47541844657524e689a9_81220c5f: unauthorized: authentication required"}

Looks like this happens because we're trying to pull before we log in:

https://github.com/rdo-infra/ci-config/blob/f3b18f8c47c73083e7406f5a68e15b758ae83524/ci-scripts/container-push/container-push.yml#L43-L60

Previously anonymous pull from the RDO registry was possible.

Flipping the two tasks makes it possible to pull the images, but this is a big issue for other jobs that are just trying to pull the images without a proper login anonymously.

[Attila Darazs (adarazs)]

Correction: it's not possible to pull the images even with the tasks flipped. The login task fails as well with

TASK [Login to rdoproject registry] ************************************************************************
fatal: [localhost]: FAILED! => {"changed": false, "failed": true, "msg": "Logging into trunk.registry.rdoproject.org for user unused failed - 401 Client Error: Unauthorized (\"{\"message\":\"Get https://trunk.registry.rdoproject.org/v2/: unauthorized: authentication required\"}\")"}

[Attila Darazs (adarazs)]

This is now fixed by RDO infra -- the issue was caused by a redeployed rdo registry and was twofold: 1) not having anonymous pull access 2) not having the account key updated on the promoter server. Both of these are fixed now and future container promotions should work. Closing bug.