mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
31 lines
1.9 KiB
Plaintext
31 lines
1.9 KiB
Plaintext
// Module included in the following assemblies:
|
|
//
|
|
// * registry/installing-openstack- .adoc
|
|
// * registry/configuring-registry-operator.adoc
|
|
// * registry/configuring-registry-storage-openstack-user-infrastructure.adoc
|
|
:_mod-docs-content-type: PROCEDURE
|
|
[id="registry-configuring-registry-storage-swift-trust_{context}"]
|
|
= Configuring Image Registry Operator redirects
|
|
|
|
[role="_abstract"]
|
|
By disabling redirects, you can configure the Image Registry Operator to control whether clients such as {product-title} cluster builds or external systems like developer machines are redirected to pull images directly from {rh-openstack-first} Swift storage. This configuration is optional and depends on whether the clients trust the storage's SSL/TLS certificates.
|
|
|
|
[NOTE]
|
|
====
|
|
In situations where clients to not trust the storage certificate, setting the `disableRedirect` option can be set to `true` proxies traffic through the image registry. Consequently, however, the image registry might require more resources, especially network bandwidth, to handle the increased load.
|
|
|
|
Alternatively, if clients trust the storage certificate, the registry can allow redirects. This reduces resource demand on the registry itself.
|
|
|
|
Some users might prefer to configure their clients to trust their self-signed certificate authorities (CAs) instead of disabling redirects. If you are using a self-signed CA, you must decide between trusting the custom CAs or disabling redirects.
|
|
====
|
|
// to allow the client to pull the image layers from the image registry rather than from links directly from Swift.
|
|
|
|
.Procedure
|
|
|
|
* To ensures that the image registry proxies traffic instead of relying on Swift storage, change the value of the `spec.disableRedirect` field in the `config.imageregistry` object to `true` by running the following command:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc patch configs.imageregistry.operator.openshift.io cluster --type merge --patch '{"spec":{"disableRedirect":true}}'
|
|
----
|