Skip to content

Commit 8e20111

Browse files
stevsmitSteven Smith
andauthored
Removes SSL module to reference securing quay (quay#1344)
Co-authored-by: Steven Smith <[email protected]>
1 parent 7c6e05d commit 8e20111

File tree

4 files changed

+31
-4
lines changed

4 files changed

+31
-4
lines changed

deploy_red_hat_quay_operator/master.adoc

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,7 @@ include::modules/attributes.adoc[]
22

33
[id="deploy-quay-on-openshift-op-tng"]
44
= Deploying the {productname} Operator on {ocp}
5+
:context: quay-operator
56

67
{productname} is an enterprise-quality container registry. Use {productname} to build and store container images, then make them available to deploy across your enterprise.
78

@@ -85,8 +86,8 @@ include::modules/operator-config-cli-download.adoc[leveloffset=+2]
8586

8687
//SSL/TLS
8788
include::modules/operator-custom-ssl-certs-config-bundle.adoc[leveloffset=+1]
88-
include::modules/ssl-create-certs.adoc[leveloffset=+2]
89-
include::modules/creating-custom-ssl-certs-config-bundle.adoc[leveloffset=+2]
89+
//include::modules/ssl-create-certs.adoc[leveloffset=+2]
90+
//include::modules/creating-custom-ssl-certs-config-bundle.adoc[leveloffset=+2]
9091

9192
//Deploying configuration tool
9293
//include::modules/operator-config-ui.adoc[leveloffset=+1]
@@ -99,3 +100,5 @@ include::modules/creating-custom-ssl-certs-config-bundle.adoc[leveloffset=+2]
99100
.Next steps
100101

101102
* https://access.redhat.com/documentation/en-us/red_hat_quay/{producty}/html-single/red_hat_quay_operator_features/[{productname} features]
103+
104+
*link:https://docs.redhat.com/en/documentation/red_hat_quay/3.14/html/securing_red_hat_quay/index[Securing {productname}]
Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
:_content-type: CONCEPT
2+
[id="modifying-configbundlesecret-cli"]
3+
= Modifying the configuration file by using the CLI
4+
5+
You can modify the `config.yaml` file that is stored by the `configBundleSecret` by using the CLI.
6+
7+
[NOTE]
8+
====
9+
Modifying the `config.yaml` file that is stored by the `configBundleSecret` is a multi-step procedure that requires base64 decoding the existing configuration file and then uploading the changes. For most cases, using the {ocp} web console to make changes to the `config.yaml` file is simpler.
10+
====
11+
12+
.Prerequisites
13+
14+
* You are logged in to the {ocp} cluster as a user with admin privileges.
15+
16+
.Procedure
17+

modules/operator-custom-ssl-certs-config-bundle.adoc

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,8 @@
22
[id="operator-custom-ssl-certs-config-bundle"]
33
= Configuring custom SSL/TLS certificates for {productname-ocp}
44

5+
ifeval::["{context}" == "quay-security"]
6+
57
When {productname} is deployed on {ocp}, the `tls` component of the `QuayRegistry` custom resource definition (CRD) is set to `managed` by default. As a result, {ocp}'s Certificate Authority is used to create HTTPS endpoints and to rotate SSL/TLS certificates.
68
79
You can configure custom SSL/TLS certificates before or after the initial deployment of {productname-ocp}. This process involves creating or updating the `configBundleSecret` resource within the `QuayRegistry` YAML file to integrate your custom certificates and setting the `tls` component to `unmanaged`.
@@ -18,4 +20,9 @@ The following procedures enable you to apply custom SSL/TLS certificates to ensu
1820
* The following procedure is used for securing {productname} with an HTTPS certificate. Note that this differs from managing Certificate Authority Trust Bundles. CA Trust Bundles are used by system processes within the `Quay` container to verify certificates against trusted CAs, and ensure that services like LDAP, storage backend, and OIDC connections are trusted.
1921
2022
* If you are adding the certificates to an existing deployment, you must include the existing `config.yaml` file in the new config bundle secret, even if you are not making any configuration changes.
21-
====
23+
====
24+
endif::[]
25+
26+
ifeval::["{context}" == "quay-operator"]
27+
This content has been moved to link:https://docs.redhat.com/en/documentation/red_hat_quay/3.14/html/securing_red_hat_quay/index[Securing {productname}]. This chapter will be removed in a future version of {productname}.
28+
endif::[]

modules/ssl-tls-quay-overview.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
:_content-type: CONCEPT
22
[id="ssl-tls-quay-overview"]
3-
= SSL and TLS for {productname}
3+
= Configuring SSL and TLS for {productname}
44

55
The Secure Sockets Layer (SSL) protocol was originally developed by Netscape Corporation to provide a mechanism for secure communication over the Internet. Subsequently, the protocol was adopted by the Internet Engineering Task Force (IETF) and renamed to Transport Layer Security (TLS).
66

0 commit comments

Comments
 (0)