Skip to content

Commit 2a0a546

Browse files
author
Steven Smith
committed
Adds proc to update ssl tls keys and cert for OMR
1 parent 107af8e commit 2a0a546

9 files changed

+70
-7
lines changed

‎installing/disconnected_install/installing-mirroring-creating-registry.adoc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ include::modules/mirror-registry-localhost.adoc[leveloffset=+1]
3131
include::modules/mirror-registry-localhost-update.adoc[leveloffset=+1]
3232
include::modules/mirror-registry-remote.adoc[leveloffset=+1]
3333
include::modules/mirror-registry-remote-host-update.adoc[leveloffset=+1]
34+
include::modules/mirror-registry-ssl-cert-replace.adoc[leveloffset=+1]
3435
include::modules/mirror-registry-uninstall.adoc[leveloffset=+1]
3536
include::modules/mirror-registry-flags.adoc[leveloffset=+1]
3637
include::modules/mirror-registry-release-notes.adoc[leveloffset=+1]

‎modules/mirror-registry-flags.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// Module included in the following assemblies:
22
//
3-
// * installing/disconnected_install/installing-mirroring-installation-images.adoc
3+
// * installing/disconnected_install/installing-mirroring-creating-registry.adoc
44

55
[id="mirror-registry-flags_{context}"]
66
= Mirror registry for Red Hat OpenShift flags

‎modules/mirror-registry-localhost-update.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// module included in the following assembly:
22
//
3-
// * installing-mirroring-creating-registry.adoc
3+
// * /home/stevsmit/pp/openshift-docs/installing/disconnected_install/installing-mirroring-creating-registry.adoc
44

55
:_content-type: PROCEDURE
66
[id="mirror-registry-localhost-update_{context}"]

‎modules/mirror-registry-release-notes.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// Module included in the following assemblies:
22
//
3-
// * installing/disconnected_install/installing-mirroring-installation-images.adoc
3+
// * installing/disconnected_install/installing-mirroring-creating-registry.adoc
44

55
[id="mirror-registry-release-notes_{context}"]
66
= Mirror registry for Red Hat OpenShift release notes

‎modules/mirror-registry-remote-host-update.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// module included in the following assembly:
22
//
3-
// * installing-mirroring-creating-registry.adoc
3+
// * installing/disconnected_install/installing-mirroring-creating-registry.adoc
44

55
:_content-type: PROCEDURE
66
[id="mirror-registry-remote-host-update_{context}"]

‎modules/mirror-registry-remote.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// Module included in the following assemblies:
22
//
3-
// * installing/disconnected_install/installing-mirroring-installation-images.adoc
3+
// * installing/disconnected_install/installing-mirroring-creating-registry.adoc
44

55
:_content-type: PROCEDURE
66
[id="mirror-registry-remote_{context}"]

‎modules/mirror-registry-ssl-cert-replace.adoc

Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,62 @@
1+
// module included in the following assembly:
2+
//
3+
// * installing/disconnected_install/installing-mirroring-creating-registry.adoc
4+
5+
:_content-type: PROCEDURE
6+
[id="mirror-registry-ssl-cert-replace_{context}"]
7+
= Replacing mirror registry for Red Hat OpenShift SSL/TLS certificates
8+
9+
In some cases, you might want to update your SSL/TLS certificates for the the _mirror registry for Red Hat OpenShift_. This is useful in the following scenarios:
10+
11+
* If you are replacing the current _mirror registry for Red Hat OpenShift_ certificate.
12+
* If you are using the same certificate as the previous _mirror registry for Red Hat OpenShift_ installation.
13+
* If you are periodically updating the _mirror registry for Red Hat OpenShift_ certificate.
14+
15+
Use the following procedure to replace _mirror registry for Red Hat OpenShift_ SSL/TLS certificates.
16+
17+
.Prerequisites
18+
19+
* You have downloaded the `./mirror-registry` binary from the link:https://console.redhat.com/openshift/downloads#tool-mirror-registry[OpenShift console *Downloads*] page.
20+
21+
.Procedure
22+
23+
. Enter the following command to install the _mirror registry for Red Hat OpenShift_:
24+
+
25+
[source,terminal]
26+
----
27+
$ ./mirror-registry install \
28+
--quayHostname <host_example_com> \
29+
--quayRoot <example_directory_name>
30+
----
31+
+
32+
This installs the _mirror registry for Red Hat OpenShift_ to the `$HOME/quay-install` directory.
33+
34+
. Prepare a new certificate authority (CA) bundle and generate new `ssl.key` and `ssl.crt` key files. For more information, see link:https://access.redhat.com/documentation/en-us/red_hat_quay/3/html-single/deploy_red_hat_quay_for_proof-of-concept_non-production_purposes/index#introduction-using-ssl[Using SSL/TLS].
35+
36+
. Assign `/$HOME/quay-install` an environment variable, for example, `QUAY`, by entering the following command:
37+
+
38+
[source,terminal]
39+
----
40+
$ export QUAY=/$HOME/quay-install
41+
----
42+
43+
. Copy the new `ssl.crt` file to the `/$HOME/quay-install` directory by entering the following command:
44+
+
45+
[source,terminal]
46+
----
47+
$ cp ~/ssl.crt $QUAY/quay-config
48+
----
49+
50+
. Copy the new `ssl.key` file to the `/$HOME/quay-install` directory by entering the following command:
51+
+
52+
[source,terminal]
53+
----
54+
$ cp ~/ssl.key $QUAY/quay-config
55+
----
56+
57+
. Restart the `quay-app` application pod by entering the following command:
58+
+
59+
[source,terminal]
60+
----
61+
$ systemctl restart quay-app
62+
----

‎modules/mirror-registry-troubleshooting.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// module included in the following assembly:
22
//
3-
// * installing-mirroring-creating-registry.adoc
3+
// * installing/disconnected_install/installing-mirroring-creating-registry.adoc
44

55
:_content-type: PROCEDURE
66
[id="mirror-registry-troubleshooting_{context}"]

‎modules/mirror-registry-uninstall.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
// Module included in the following assemblies:
22
//
3-
// * installing/disconnected_install/installing-mirroring-installation-images.adoc
3+
// * installing/disconnected_install/installing-mirroring-creating-registry.adoc
44

55
[id="uninstalling-mirror-registry_{context}"]
66
= Uninstalling the mirror registry for Red Hat OpenShift

0 commit comments

Comments
 (0)