Access to OpenShift Image Registry via ServiceAccount token

registry_access.sh

#!/bin/bash

# Confirm the service is up:
oc get svc image-registry -n openshift-image-registry
# Create a ServiceAccount:
oc create sa pipeline
# Add image-builder role to the ServiceAccount:
oc adm policy add-role-to-user system:image-builder -z pipeline
# Add privileged Security Context Constraint (SCC) so you can run container inside container:
oc adm policy add-scc-to-user privileged -z pipeline
# Set the ServiceAccount token:
TOKEN=$(oc get secret $(oc get secret | grep pipeline-token | head -1 | awk '{print $1}') -o jsonpath="{.data.token}" | base64 -d)
oc create secret generic pipeline-sa-token --from-literal='token'=$(echo ${TOKEN})