Docker registries service parameters not being created

[Hugo Nicodemos Brito]

Brief Description
-----------------
Image pull failed from central cloud with "unauthorized: authentication required" message.

Severity
--------
Major: System/Feature is usable but degraded

Steps to Reproduce
------------------
Install subcloud and apply platform-integ-apps

Expected Behavior
------------------
Image pull should go fine without any issues.

Actual Behavior
----------------
Image pull failed and platform-integ-apps apply failed due to that sanity installation failed.

------------------------{}------{}+{}---------------------------------------{}{}--------------{}{}----------{}{}----------------------------------------

application version manifest name manifest file status progress
------------------------{}------{}+{}---------------------------------------{}{}--------------{}{}----------{}{}----------------------------------------

cert-manager 24.03-75 cert-manager-fluxcd-manifests fluxcd-manifests applied completed
dell-storage 24.03-15 dell-storage-fluxcd-manifests fluxcd-manifests uploaded completed
nginx-ingress-controller 24.03-56 nginx-ingress-controller-fluxcd-manifests fluxcd-manifests applied completed
oidc-auth-apps 24.03-51 oidc-auth-apps-fluxcd-manifests fluxcd-manifests uploaded completed
platform-integ-apps 24. platform-integ-apps-fluxcd-manifests fluxcd-manifests apply-failed Deployment of application platform-
                          03-136 integ-apps (24.03-136) failed: Failed to
                                                                                                              download images. Check sysinv and daemon
                                                                                                              Reproducibility
---------------
Reproducible

System Configuration
--------------------
DC

Branch/Pull Time/Commit
-----------------------

Last Pass
---------

Timestamp/Logs
--------------

Test Activity
-------------

Workaround
----------
secret_uuid=`openstack secret list |grep quay-registry-secret | awk '{print $2}' | awk -F/ '{print $6}'`
system service-parameter-add docker quay-registry auth-secret=${secret_uuid}

secret_uuid=`openstack secret list |grep registryk8s-registry-secret | awk '{print $2}' | awk -F/ '{print $6}'`
system service-parameter-add docker registryk8s-registry auth-secret=${secret_uuid}

secret_uuid=`openstack secret list |grep ghcr-registry-secret | awk '{print $2}' | awk -F/ '{print $6}'`
system service-parameter-add docker ghcr-registry auth-secret=${secret_uuid}

secret_uuid=`openstack secret list |grep docker-registry-secret | awk '{print $2}' | awk -F/ '{print $6}'`
system service-parameter-add docker docker-registry auth-secret=${secret_uuid}

secret_uuid=`openstack secret list |grep k8s-registry-secret | awk '{print $2}' | awk -F/ '{print $6}'`
system service-parameter-add docker k8s-registry auth-secret=${secret_uuid}

system service-parameter-apply docker

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/ansible-playbooks/+/918778

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/starlingx/ansible-playbooks/+/918778
Committed: https://opendev.org/starlingx/ansible-playbooks/commit/cee20d96fc2fb84afecc898c4388363eacfe5af3
Submitter: "Zuul (22348)"
Branch: master

commit cee20d96fc2fb84afecc898c4388363eacfe5af3
Author: Hugo Brito <email address hidden>
Date: Thu May 9 11:58:00 2024 -0300

    Create barbican secrets before sysinv db update

    This commit creates the Barbican user, service, and
    endpoints before the 'update sysinv db' task. This
    enables the creation of the registry secrets to be
    used to create service parameters for the registries.

    Test Plan:

    PASS: Perform a complete deploy in a DC environment.
    PASS: Check that all service parameters for Docker are created.
    PASS: Successfully apply the platform-integ-apps.

    Closes-Bug: 2065317

    Change-Id: I259e176a4a6309ca8748aef37e137e0c6e0894b9
    Signed-off-by: Hugo Brito <email address hidden>