|
| 1 | +// module included in the following assembly: |
| 2 | +// |
| 3 | +// * installing/disconnected_install/installing-mirroring-creating-registry.adoc |
| 4 | + |
| 5 | +:_content-type: PROCEDURE |
| 6 | +[id="mirror-registry-ssl-cert-replace_{context}"] |
| 7 | += Replacing mirror registry for Red Hat OpenShift SSL/TLS certificates |
| 8 | + |
| 9 | +In some cases, you might want to update your SSL/TLS certificates for the the _mirror registry for Red Hat OpenShift_. This is useful in the following scenarios: |
| 10 | + |
| 11 | +* If you are replacing the current _mirror registry for Red Hat OpenShift_ certificate. |
| 12 | +* If you are using the same certificate as the previous _mirror registry for Red Hat OpenShift_ installation. |
| 13 | +* If you are periodically updating the _mirror registry for Red Hat OpenShift_ certificate. |
| 14 | +
|
| 15 | +Use the following procedure to replace _mirror registry for Red Hat OpenShift_ SSL/TLS certificates. |
| 16 | + |
| 17 | +.Prerequisites |
| 18 | + |
| 19 | +* You have downloaded the `./mirror-registry` binary from the link:https://console.redhat.com/openshift/downloads#tool-mirror-registry[OpenShift console *Downloads*] page. |
| 20 | +
|
| 21 | +.Procedure |
| 22 | + |
| 23 | +. Enter the following command to install the _mirror registry for Red Hat OpenShift_: |
| 24 | ++ |
| 25 | +[source,terminal] |
| 26 | +---- |
| 27 | +$ ./mirror-registry install \ |
| 28 | +--quayHostname <host_example_com> \ |
| 29 | +--quayRoot <example_directory_name> |
| 30 | +---- |
| 31 | ++ |
| 32 | +This installs the _mirror registry for Red Hat OpenShift_ to the `$HOME/quay-install` directory. |
| 33 | + |
| 34 | +. Prepare a new certificate authority (CA) bundle and generate new `ssl.key` and `ssl.crt` key files. For more information, see link:https://access.redhat.com/documentation/en-us/red_hat_quay/3/html-single/deploy_red_hat_quay_for_proof-of-concept_non-production_purposes/index#introduction-using-ssl[Using SSL/TLS]. |
| 35 | + |
| 36 | +. Assign `/$HOME/quay-install` an environment variable, for example, `QUAY`, by entering the following command: |
| 37 | ++ |
| 38 | +[source,terminal] |
| 39 | +---- |
| 40 | +$ export QUAY=/$HOME/quay-install |
| 41 | +---- |
| 42 | + |
| 43 | +. Copy the new `ssl.crt` file to the `/$HOME/quay-install` directory by entering the following command: |
| 44 | ++ |
| 45 | +[source,terminal] |
| 46 | +---- |
| 47 | +$ cp ~/ssl.crt $QUAY/quay-config |
| 48 | +---- |
| 49 | + |
| 50 | +. Copy the new `ssl.key` file to the `/$HOME/quay-install` directory by entering the following command: |
| 51 | ++ |
| 52 | +[source,terminal] |
| 53 | +---- |
| 54 | +$ cp ~/ssl.key $QUAY/quay-config |
| 55 | +---- |
| 56 | + |
| 57 | +. Restart the `quay-app` application pod by entering the following command: |
| 58 | ++ |
| 59 | +[source,terminal] |
| 60 | +---- |
| 61 | +$ systemctl restart quay-app |
| 62 | +---- |
0 commit comments