Chapter 1. Registry service accounts for 3scale

Procedure

1. Navigate to the Registry Service Accounts page and log in.
2. Click New Service Account.

3. Fill in the form on the Create a New Registry Service Account page.

   1. Add a name for the service account.

      Note: You will see a fixed-length, randomly generated numerical string before the form field.

   2. Enter a Description.
   3. Click Create.
4. Navigate back to your Service Accounts.
5. Click the Service Account you created.
6. Make a note of the username, including the prefix string, for example 12345678|username, and your password. This username and password will be used to log in to registry.redhat.io.

Procedure

1. Log into your OpenShift cluster as administrator:

   $ oc login -u system:admin

   Copy to Clipboard Toggle word wrap

2. Open the project in which you want to deploy 3scale:

   oc project your-openshift-project

   Copy to Clipboard Toggle word wrap

3. Create a docker-registry secret using your Red Hat Customer Portal account, replacing threescale-registry-auth with the secret to create:

   $ oc create secret docker-registry threescale-registry-auth \
     --docker-server=registry.redhat.io \
     --docker-username="customer_portal_username" \
     --docker-password="customer_portal_password" \
     --docker-email="email_address"

   Copy to Clipboard Toggle word wrap

   You will see the following output:

   secret/threescale-registry-auth created

   Copy to Clipboard Toggle word wrap

4. Link the secret to your service account to use the secret for pulling images. The service account name must match the name that the OpenShift pod uses. This example uses the default service account:

   $ oc secrets link default threescale-registry-auth --for=pull

   Copy to Clipboard Toggle word wrap

5. Link the secret to the builder service account to use the secret for pushing and pulling build images:

   $ oc secrets link builder threescale-registry-auth

   Copy to Clipboard Toggle word wrap