Red Hat container registry authentication
Red Hat Update Infrastructure container images are published on registry.redhat.io, which requires
authentication.
When you run the installer on a control node, or pass credentials to the target host so that it can pull RHUA, CDS, and HAProxy images, you need a user name and password for this registry. You can use either of the following:
- Individual Customer Portal credentials — the same user name and password you use to log in to the Red Hat Customer Portal (often referred to as CCSP credentials in cloud provider contexts). Suitable for evaluation or when a single administrator runs the installation.
- Registry service account — a dedicated authentication token for shared or automated environments. Red Hat recommends this for Red Hat Update Infrastructure deployments so that personal Customer Portal credentials are not stored on shared systems and are not affected by mandated password resets. Create and manage service accounts in the Registry Service Account management application; see Red Hat Container Registry Authentication.
A registry service account user name includes a fixed prefix, for example
XXXXXXX|my-rhui-installer. Use the full user name and the associated password when logging in
to registry.redhat.io.
Registry credentials are used only to pull container images from registry.redhat.io.
Registering RHEL hosts with subscription-manager still requires valid Red Hat
subscription credentials; registry service accounts cannot be used for that step.