Chapter 3. Configure image mirroring for disconnected environments

Procedure

1. Create an ImageDigestMirrorSet to mirror images from registry.redhat.io/rhoai to your mirror registry:

   $ oc apply -f - <<'EOF'
   apiVersion: config.openshift.io/v1
   kind: ImageDigestMirrorSet
   metadata:
     name: rhoai-mirror
   spec:
     imageDigestMirrors:
       - mirrors:
           - <LOCAL_MIRROR_REGISTRY>/rhoai
         source: registry.redhat.io/rhoai
   EOF

   Wait for the machine config pools to update:

   $ oc wait mcp master worker --for=condition=Updated=True --timeout=600s

   Note

   On single-node OpenShift or compact clusters, the worker machine config pool might not exist. If the command fails, run oc get mcp to list available pools and wait on only the pools present in your cluster.

2. Verify that the cluster pull secret includes credentials for registry.redhat.io:

   $ oc get secret pull-secret -n openshift-config \
     -o jsonpath='{.data.\.dockerconfigjson}' | base64 -d | jq -r '.auths | keys[]'

   The output must include quay.io and registry.redhat.io. If either entry is missing, update the pull secret:

   $ oc get secret pull-secret -n openshift-config \
     -o jsonpath='{.data.\.dockerconfigjson}' | base64 -d > /tmp/pull-secret.json

   Add the missing registry credentials to the auths block in /tmp/pull-secret.json, then apply:

   $ oc set data secret/pull-secret -n openshift-config \
     --from-file=.dockerconfigjson=/tmp/pull-secret.json

   Wait for the machine config pools to update:

   $ oc wait mcp master worker --for=condition=Updated=True --timeout=600s