From cf2232184fa9d34514f83ab846b426e1d0fefeb8 Mon Sep 17 00:00:00 2001 From: David Sariel Date: Mon, 30 Mar 2026 13:16:01 +0300 Subject: [PATCH] [openshift_setup] Add image-rbac-proxy to the list of allowed registries According to the ANVIL-58 ticket, we prioritize image-rbac-proxy registry images. This change is required to make the prioritization work. Without adding the registry to the list of allowed registries, it would be considered insecure. Signed-off-by: David Sariel ANVIL-58 --- roles/openshift_setup/tasks/main.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/roles/openshift_setup/tasks/main.yml b/roles/openshift_setup/tasks/main.yml index 045e139a1c..da7cc4e1ac 100644 --- a/roles/openshift_setup/tasks/main.yml +++ b/roles/openshift_setup/tasks/main.yml @@ -181,6 +181,7 @@ - "registry.stage.redhat.io" - "images.paas.redhat.com" - "image-registry.openshift-image-registry.svc:5000" + - "image-rbac-proxy.apps.kflux-osp-p01.yt45.p1.openshiftapps.com" all_registries: "{{ [cifmw_update_containers_registry] + default_allowed_registries | unique }}" kubernetes.core.k8s: kubeconfig: "{{ cifmw_openshift_kubeconfig }}"