Chapter 1. Registry service accounts for 3scale

Procedure

1. Navigate to the Registry Service Accounts page and log in.
2. Click New Service Account.

3. Fill in the form on the Create a New Registry Service Account page.

   1. Add a name for the service account.

      Note: You will see a fixed-length, randomly generated numerical string before the form field.

   2. Enter a Description.
   3. Click Create.
4. Navigate back to your Service Accounts.
5. Click the Service Account you created.
6. Make a note of the username, including the prefix string, for example 12345678|username, and your password. This username and password will be used to log in to registry.redhat.io.

Procedure

1. Log into your OpenShift cluster as administrator:

   $ oc login -u <admin_username>

2. Open the project in which you want to deploy 3scale:

   $ oc project your-openshift-project

3. Create a docker-registry secret using your Red Hat Customer Portal account, replacing threescale-registry-auth with the secret to create:

   $ oc create secret docker-registry threescale-registry-auth \
     --docker-server=registry.redhat.io \
     --docker-username="customer_portal_username" \
     --docker-password="customer_portal_password" \
     --docker-email="email_address"

   You will see the following output:

   secret/threescale-registry-auth created

4. Link the secret to your service account to use the secret for pulling images. The service account name must match the name that the OpenShift pod uses. This example uses the default service account:

   $ oc secrets link default threescale-registry-auth --for=pull

5. Link the secret to the builder service account to use the secret for pushing and pulling build images:

   $ oc secrets link builder threescale-registry-auth