Intermittent ImagePullFailed during OCP VM provisioning using ontap s3 over HTTP
Applies to
- ONTAP S3
- ONTAP 9.13.1P8
- Red Hat Open Shift
Issue
During VM provisioning in OpenShift Container Platform (OCP), the following error is intermittently observed:
Warning ImagePullFailed <controller pod name in OpenShift> Unable to process data: Unable to transfer source data to scratch space: failed to pull image: read tcp <OCP Node IP>:<Port>-><ONTAP S3 endpoint>:80: read: connection reset by peer
Key Observations:
- Access from Linux systems using AWS CLI over both HTTP and HTTPS works without issues
- The same image objects can be successfully downloaded via AWS CLI over HTTP
- The issue is observed only during VM provisioning in OCP and only when using HTTP
- HTTPS access from OCP does not show this issue
- The issue is intermittent and does not follow a consistent pattern
- Packet trace logs show that the ONTAP S3 server responded to the pull request with an
HTTP/1.1 403 Forbidden error