Attention: This version of Event Streams has reached End of Support. For more information about supported versions, see the support matrix.

Chart deployment fails with ‘no ImagePolicies’ error

Symptoms

When the Event Streams chart is deployed, an Internal service error occurs stating that there are no ImagePolicies in the "<name>" namespace, where <name> is the namespace into which you are deploying the chart.

Causes

Image policies are used to control access to Docker repositories and it is necessary to ensure that there is a suitable policy in place before the chart is installed.

This situation occurs if there are no image policies defined for the target namespace. To confirm this, list the policies as follows:

kubectl get imagepolicy

You should see a message stating No resources found.

Resolving the problem

If you are using Event Streams (not the Community Edition), you will need access to the following image repositories:

  • docker.io
  • mycluster.icp:8500

If you are using Community Edition, you need access to the following image repositories:

  • docker.io

To apply an image policy, create a new yaml file with the following content, replacing the namespace with the namespace into which the chart will be deployed and the name with a name of your choice. The following is an example where we are adding both repositories:

apiVersion: securityenforcement.admission.cloud.ibm.com/v1beta1
kind: ImagePolicy
metadata:
  name: <imagePolicyName>
  namespace: <namespace>
spec:
  repositories:
  - name: docker.io/*
    policy: null
  - name: mycluster.icp:8500/*
    policy: null

Then run the following command to create the image policy:

kubectl apply -f <yamlFile>

Finally, repeat the installation steps to deploy the chart.