×

Configuring the Image Registry Operator to trust Swift storage

You must configure the Image Registry Operator to trust OpenStack Swift storage.

Procedure
  • From a command line, enter the following command to change the value of the spec.disableRedirect field in the config.imageregistry object to true:

    $ oc patch configs.imageregistry.operator.openshift.io cluster --type merge --patch '{"spec":{"disableRedirect":true}}'

Configuring a secret for the Image Registry Operator

In addition to the configs.imageregistry.operator.openshift.io and ConfigMap resources, configuration is provided to the Operator by a separate secret resource located within the openshift-image-registry namespace.

The image-registry-private-configuration-user secret provides credentials needed for storage access and management. It overrides the default credentials used by the Operator, if default credentials were found.

For Swift on OpenStack storage, the secret is expected to contain the following two keys:

  • REGISTRY_STORAGE_SWIFT_USER

  • REGISTRY_STORAGE_SWIFT_PASSWORD

Procedure
  • Create an OKD secret that contains the required keys.

    $ oc create secret generic image-registry-private-configuration-user --from-literal=REGISTRY_STORAGE_SWIFT_USER=<username> --from-literal=REGISTRY_STORAGE_SWIFT_PASSWORD=<password> -n openshift-image-registry

Registry storage for OpenStack with user-provisioned infrastructure

You must set up the storage medium manually and configure the settings in the registry custom resource (CR).

Prerequisites
  • A cluster on OpenStack with user-provisioned infrastructure.

  • To configure registry storage for OpenStack, you need to provide Registry Operator cloud credentials.

  • For Swift on OpenStack storage, the secret is expected to contain the following two keys:

    • REGISTRY_STORAGE_SWIFT_USER

    • REGISTRY_STORAGE_SWIFT_PASSWORD

Image Registry Operator configuration parameters for OpenStack Swift

The following configuration parameters are available for OpenStack Swift registry storage.

Parameter Description

authURL

This value is optional.

authVersion

This value is optional.

container

This value is optional.

domain

This value is optional.

domainID

This value is optional.

tenant

This value is optional.

tenantID

This value is optional.

regionName

This value is optional.