mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 21:46:22 +01:00
109 lines
4.2 KiB
Plaintext
109 lines
4.2 KiB
Plaintext
// Module included in the following assemblies:
|
|
//
|
|
// * post_installation_configuration/cluster-tasks.adoc
|
|
// * openshift_images/samples-operator-alt-registry.adoc
|
|
|
|
ifeval::["{context}" == "post-install-cluster-tasks"]
|
|
:restrictednetwork:
|
|
endif::[]
|
|
|
|
ifeval::["{context}" == "samples-operator-alt-registry"]
|
|
:samplesoperatoraltreg:
|
|
endif::[]
|
|
|
|
:_mod-docs-content-type: PROCEDURE
|
|
[id="installation-restricted-network-samples_{context}"]
|
|
= Using Cluster Samples Operator image streams with alternate or mirrored registries
|
|
|
|
[role="_abstract"]
|
|
You can use an alternate or mirror registry to host your images streams instead of using the Red{nbsp}Hat registry.
|
|
|
|
Most image streams in the `openshift` namespace managed by the Cluster Samples Operator point to images located in the Red{nbsp}Hat registry at link:https://registry.redhat.io[registry.redhat.io].
|
|
ifdef::restrictednetwork[]
|
|
Mirroring does not apply to these image streams.
|
|
endif::[]
|
|
|
|
[NOTE]
|
|
====
|
|
The `cli`, `installer`, `must-gather`, and `tests` image streams, while part of the install payload, are not managed by the Cluster Samples Operator. These are not addressed in this procedure.
|
|
====
|
|
|
|
[IMPORTANT]
|
|
====
|
|
The Cluster Samples Operator must be set to `Managed` in a disconnected environment. To install the image streams, you must have a mirrored registry.
|
|
====
|
|
|
|
.Prerequisites
|
|
ifndef::openshift-rosa,openshift-dedicated[]
|
|
* Access to the cluster as a user with the `cluster-admin` role.
|
|
endif::openshift-rosa,openshift-dedicated[]
|
|
ifdef::openshift-rosa,openshift-dedicated[]
|
|
* Access to the cluster as a user with the `dedicated-admin` role.
|
|
endif::openshift-rosa,openshift-dedicated[]
|
|
* Create a pull secret for your mirror registry.
|
|
|
|
.Procedure
|
|
|
|
. Access the images of a specific image stream to mirror, for example:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc get is <imagestream> -n openshift -o json | jq .spec.tags[].from.name | grep registry.redhat.io
|
|
----
|
|
+
|
|
. Mirror images from link:https://registry.redhat.io[registry.redhat.io] associated with any image streams you need
|
|
ifdef::restrictednetwork[]
|
|
in the restricted network environment into one of the defined mirrors, for example:
|
|
endif::[]
|
|
ifdef::configsamplesoperator[]
|
|
into your defined preferred registry, for example:
|
|
endif::[]
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc image mirror registry.redhat.io/rhscl/ruby-25-rhel7:latest ${MIRROR_ADDR}/rhscl/ruby-25-rhel7:latest
|
|
----
|
|
|
|
. Create the image configuration object for the cluster by running the following command:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc create configmap registry-config --from-file=${MIRROR_ADDR_HOSTNAME}..5000=$path/ca.crt -n openshift-config
|
|
----
|
|
|
|
. Add the required trusted CAs for the mirror in the image configuration object:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc patch image.config.openshift.io/cluster --patch '{"spec":{"additionalTrustedCA":{"name":"registry-config"}}}' --type=merge
|
|
----
|
|
|
|
. Update the `samplesRegistry` field in the Cluster Samples Operator configuration object to contain the `hostname` portion of the mirror location defined in the mirror configuration:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc edit configs.samples.operator.openshift.io -n openshift-cluster-samples-operator
|
|
----
|
|
+
|
|
[IMPORTANT]
|
|
====
|
|
This step is required because the image stream import process does not use the mirror or search mechanism at this time.
|
|
====
|
|
|
|
. Add any image streams that are not mirrored into the `skippedImagestreams` field of the Cluster Samples Operator configuration object. Or if you do not want to support any of the sample image streams, set the Cluster Samples Operator to `Removed` in the Cluster Samples Operator configuration object.
|
|
+
|
|
[NOTE]
|
|
====
|
|
The Cluster Samples Operator issues alerts if image stream imports are failing but the Cluster Samples Operator is either periodically retrying or does not appear to be retrying them.
|
|
====
|
|
+
|
|
Many of the templates in the `openshift` namespace reference the image streams. You can use `Removed` to purge both the image streams and templates. This eliminates the possibility of attempts to use the templates if they are not functional because of any missing image streams.
|
|
|
|
ifeval::["{context}" == "post-install-cluster-tasks"]
|
|
:!restrictednetwork:
|
|
endif::[]
|
|
|
|
ifeval::["{context}" == "samples-operator-alt-registry"]
|
|
:!samplesoperatoraltreg:
|
|
endif::[]
|