Chapter 5. Configuring Quay on OpenShift

Procedure

1. On the Quay Registry overview screen, click the link for the Config Bundle Secret:

   

2. To edit the secret, click Actions Edit Secret

   

3. Modify the configuration and save the changes

   

4. Monitor the deployment to ensure successful completion and that the configuration changes have taken effect

1. Retrieve the secret:

   $ oc get secret -n quay-enterprise example-registry-quay-config-editor-credentials-fg2gdgtm24 -o yaml
   
   apiVersion: v1
   data:
     password: SkZwQkVKTUN0a1BUZmp4dA==
     username: cXVheWNvbmZpZw==
   kind: Secret

2. Decode the username:

   $ echo 'cXVheWNvbmZpZw==' | base64 --decode
   
   quayconfig

3. Decode the password:

   $ echo 'SkZwQkVKTUN0a1BUZmp4dA==' | base64 --decode
   
   JFpBEJMCtkPTfjxt

1. Using the config editor endpoint, specifying the username and password for the config editor:

   $ curl -k -u quayconfig:JFpBEJMCtkPTfjxt https://example-registry-quay-config-editor-quay-enterprise.apps.docs.quayteam.org/api/v1/config

   {
       "config.yaml": {
           "ALLOW_PULLS_WITHOUT_STRICT_LOGGING": false,
           "AUTHENTICATION_TYPE": "Database",
           ...
           "USER_RECOVERY_TOKEN_LIFETIME": "30m"
       },
       "certs": {
           "extra_ca_certs/service-ca.crt": "LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURVVENDQWptZ0F3SUJBZ0lJRE9kWFhuUXFjMUF3RFFZSktvWklodmNOQVFFTEJRQXdOakUwTURJR0ExVUUKQXd3cmIzQmxibk5vYVdaMExYTmxjblpwWTJVdGMyVnlkbWx1WnkxemFXZHVaWEpBTVRZek1UYzNPREV3TXpBZQpGdzB5TVRBNU1UWXdOelF4TkRKYUZ..."
       }
   }

2. Using the config bundle secret

   1. Get the secret data:

      $ oc get secret -n quay-enterprise init-config-bundle-secret -o jsonpath='{.data}'

      Sample output

      {
          "config.yaml": "RkVBVFVSRV9VU0 ... MDAwMAo="
      }

   2. Decode the data:

      $ echo 'RkVBVFVSRV9VU0 ... MDAwMAo=' | base64 --decode

      FEATURE_USER_INITIALIZE: true
      BROWSER_API_CALLS_XHR_ONLY: false
      SUPER_USERS:
      - quayadmin
      FEATURE_USER_CREATION: false
      FEATURE_QUOTA_MANAGEMENT: true
      FEATURE_PROXY_CACHE: true
      FEATURE_BUILD_SUPPORT: true
      DEFAULT_SYSTEM_REJECT_QUOTA_BYTES: 102400000