{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/3612","labels_url":"https://api.github.com/repos/openshift/origin/issues/3612/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/3612/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/3612/events","html_url":"https://github.com/openshift/origin/issues/3612","id":93556798,"number":3612,"title":"docker push times out via service","user":{"login":"craigmunro","id":276481,"avatar_url":"https://avatars.githubusercontent.com/u/276481?v=3","gravatar_id":"","url":"https://api.github.com/users/craigmunro","html_url":"https://github.com/craigmunro","followers_url":"https://api.github.com/users/craigmunro/followers","following_url":"https://api.github.com/users/craigmunro/following{/other_user}","gists_url":"https://api.github.com/users/craigmunro/gists{/gist_id}","starred_url":"https://api.github.com/users/craigmunro/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/craigmunro/subscriptions","organizations_url":"https://api.github.com/users/craigmunro/orgs","repos_url":"https://api.github.com/users/craigmunro/repos","events_url":"https://api.github.com/users/craigmunro/events{/privacy}","received_events_url":"https://api.github.com/users/craigmunro/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2015-07-07T15:22:49Z","updated_at":"2015-07-10T13:38:18Z","closed_at":null,"body":"I have a problem pushing to the docker registry hosted in OpenShift.  I first noticed it when doing an S2I build but I can reproduce it as follows:\r\n\r\nI have a registry:\r\n```\r\n$ oc get se -n default\r\nNAME              LABELS                                    SELECTOR                  IP(S)           PORT(S)\r\ndocker-registry   docker-registry=default                   docker-registry=default   172.30.53.207   5000/TCP\r\n```\r\nPushes to this registry always hang:\r\n```\r\n$ docker push 172.30.53.207:5000/default/hello-openshift\r\nThe push refers to a repository [172.30.53.207:5000/default/hello-openshift] (len: 1)\r\n43a576a8a7db: Image already exists\r\nd9c4df52e735: Pushing [=================>                                 ] 589.8 kB/1.66 MB\r\n```\r\n\r\nEventually I get:\r\n```\r\nd9c4df52e735: Image push failed\r\nFATA[0929] Error pushing to registry: Put http://172.30.53.207:5000/v2/default/hello-openshift/blobs/uploads/0979a6d5-7e28-4d5d-a2f2-40af3497d433?_state=vOnhshHiTMeIpDxlxibiWTmdi2_r5vDrQitCcFq3hh57Ik5hbWUiOiJkZWZhdWx0L2hlbGxvLW9wZW5zaGlmdCIsIlVVSUQiOiIwOTc5YTZkNS03ZTI4LTRkNWQtYTJmMi00MGFmMzQ5N2Q0MzMiLCJPZmZzZXQiOjAsIlN0YXJ0ZWRBdCI6IjIwMTUtMDctMDdUMTQ6NTk6MDEuNjcyMjQ5Mjg0WiJ9&digest=sha256%3A9fdfbd3f3bb613e64e214875e6e5e9da20913186a458be52a6b581671474892c: write tcp 172.30.53.207:5000: connection timed out\r\n```\r\n\r\nBut I can successfully push if I avoid the service and hit the registry directly:\r\n```\r\n$ iptables-save | grep registry\r\n-A KUBE-PORTALS-CONTAINER -d 172.30.53.207/32 -p tcp -m comment --comment \"default/docker-registry:\" -m tcp --dport 5000 -j REDIRECT --to-ports 33484\r\n-A KUBE-PORTALS-HOST -d 172.30.53.207/32 -p tcp -m comment --comment \"default/docker-registry:\" -m tcp --dport 5000 -j DNAT --to-destination 11.191.98.134:33484\r\n```\r\n```\r\n$ docker push 11.191.98.134:33484/default/hello-openshift\r\nThe push refers to a repository [11.191.98.134:33484/default/hello-openshift] (len: 1)\r\n43a576a8a7db: Image already exists\r\nd9c4df52e735: Image successfully pushed\r\n369dabcb8388: Image successfully pushed\r\nDigest: sha256:3e3cb64901486993c1720abebf702ec71fcad9c8faf706abb6f9cb2c4f775d41\r\n```\r\n\r\nI don't have direct internet access so I have configured a proxy.\r\n\r\nI have RHEL 7.1 boxes with the following versions:\r\n```\r\n$ oc version\r\noc v3.0.0.1-5-g279b678\r\nkubernetes v0.17.1-804-g496be63\r\n$  docker version\r\nClient version: 1.6.2\r\nClient API version: 1.18\r\nGo version (client): go1.4.2\r\nGit commit (client): ba1f6c3/1.6.2\r\nOS/Arch (client): linux/amd64\r\nServer version: 1.6.2\r\nServer API version: 1.18\r\nGo version (server): go1.4.2\r\nGit commit (server): ba1f6c3/1.6.2\r\nOS/Arch (server): linux/amd64\r\n$ docker images\r\nREPOSITORY                                                  TAG                 IMAGE ID            CREATED             VIRTUAL SIZE\r\nregistry.access.redhat.com/openshift3/ose-docker-registry   v3.0.0.1            8d589cec84a6        7 days ago          312.8 MB\r\n```\r\n\r\nAny ideas?"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/120413870","html_url":"https://github.com/openshift/origin/issues/3612#issuecomment-120413870","issue_url":"https://api.github.com/repos/openshift/origin/issues/3612","id":120413870,"user":{"login":"jim-minter","id":1038301,"avatar_url":"https://avatars.githubusercontent.com/u/1038301?v=3","gravatar_id":"","url":"https://api.github.com/users/jim-minter","html_url":"https://github.com/jim-minter","followers_url":"https://api.github.com/users/jim-minter/followers","following_url":"https://api.github.com/users/jim-minter/following{/other_user}","gists_url":"https://api.github.com/users/jim-minter/gists{/gist_id}","starred_url":"https://api.github.com/users/jim-minter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jim-minter/subscriptions","organizations_url":"https://api.github.com/users/jim-minter/orgs","repos_url":"https://api.github.com/users/jim-minter/repos","events_url":"https://api.github.com/users/jim-minter/events{/privacy}","received_events_url":"https://api.github.com/users/jim-minter/received_events","type":"User","site_admin":false},"created_at":"2015-07-10T13:38:18Z","updated_at":"2015-07-10T13:38:18Z","body":"I've written a reproducer for this bug in Python at https://gist.github.com/jim-minter/ea17aaec8d81f990a1b0  . This is beginning to look very much like a kernel bug to me.  I'm wondering what it is about the environment that is causing it to be triggered."}}