aweiteka

Install Atomic Registry web console

Prerequisites

• expose registry with route

    oc expose service docker-registry
  

Deployment

aweiteka

# build as sigstore:auxiliary
FROM scratch

LABEL sigstore-url="sigstore.redhat.com:8443" \
      pubkey-id="2fa658e0: Red Hat, Inc. (auxiliary key) <[email protected]>" \
      pubkey-fingerprint="43A6 E49C 4A38 F4BE 9ABF 2A53 4568 9C88 2FA6 58E0" \
      pubkey-download-url="http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x45689C882FA658E0"

aweiteka

How to change Atomic Registry ports

These steps are provided for reference. Once port selection during installation is supported this manual work will not be recommended.

• Registry
• Web console
• Master API

Registry

aweiteka

#!/bin/bash

#
# for hacking on cockpit registry web UI
# using a container with bindmounted local js source
#

# on host, one time commands:
# cp containers/kubernetes/registry-dashboard-override.json pkg/kubernetes/override.json
# cp pkg/kubernetes/registry.html pkg/kubernetes/index.html

aweiteka

#!/bin/bash

# atomic pull <image>
# atomic sign <image> <key>

DIR=tmp
IMAGE=$2
KEY=$3
POLICY_FILE=policy.json

aweiteka

Edit ssh configuration file

$ sudo vi /etc/ssh/sshd_config

Change the following values to yes

...

aweiteka

defaults:
  name: global
  images:
    - fedora
    - rhel
  node: jslave1

project:
  name: my_workflow
  jobs:

aweiteka

#!/bin/bash

git clone https://github.com/openshift/openshift-docs.git
cd openshift-docs/
sudo docker run -it --rm -v `pwd`:/docs:z projectatomic/ascii_binder asciibinder package --site=atomic-registry
# per http://www.asciibinder.org/latest/guides/maintainer_guide.html#site-file-organization
# full HTML site lands in /path/to/openshift-docs/_package/atomic-registry
# Note: files are owned by root due to container running as root.
#       Non-root user doesn't have perms to write to local dir

aweiteka

Metadata Guiding Principles

• does not duplicate orchestration artifacts
• metadata syntax should be...
  • minimal
  • high level
  • meaningful
  • easy to understand and edit by humans
• parameterization should be pushed down to platform. The deployment operator should be able to override any parameter or object.

aweiteka

oauthConfig:
  assetPublicURL: https://localhost:8443/console/
  grantConfig:
    method: auto
  identityProviders:
  - name: github
    challenge: false
    login: true
    mappingMethod: claim
    provider: