Chapter 5. Configuring Quay on OpenShift

Procedure

1. On the Quay Registry overview screen, click the link for the Config Bundle Secret:

   

2. To edit the secret, click Actions Edit Secret

   

3. Modify the configuration and save the changes

   

4. Monitor the deployment to ensure successful completion and that the configuration changes have taken effect

1. Retrieve the secret:

   $ oc get secret -n quay-enterprise example-registry-quay-config-editor-credentials-fg2gdgtm24 -o yaml
   
   apiVersion: v1
   data:
     password: SkZwQkVKTUN0a1BUZmp4dA==
     username: cXVheWNvbmZpZw==
   kind: Secret

   Copy to Clipboard Toggle word wrap

2. Decode the username:

   $ echo 'cXVheWNvbmZpZw==' | base64 --decode
   
   quayconfig

   Copy to Clipboard Toggle word wrap

3. Decode the password:

   $ echo 'SkZwQkVKTUN0a1BUZmp4dA==' | base64 --decode
   
   JFpBEJMCtkPTfjxt

   Copy to Clipboard Toggle word wrap

1. Using the config editor endpoint, specifying the username and password for the config editor:

   $ curl -k -u quayconfig:JFpBEJMCtkPTfjxt https://example-registry-quay-config-editor-quay-enterprise.apps.docs.quayteam.org/api/v1/config

   Copy to Clipboard Toggle word wrap

   {
       "config.yaml": {
           "ALLOW_PULLS_WITHOUT_STRICT_LOGGING": false,
           "AUTHENTICATION_TYPE": "Database",
           ...
           "USER_RECOVERY_TOKEN_LIFETIME": "30m"
       },
       "certs": {
           "extra_ca_certs/service-ca.crt": "LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURVVENDQWptZ0F3SUJBZ0lJRE9kWFhuUXFjMUF3RFFZSktvWklodmNOQVFFTEJRQXdOakUwTURJR0ExVUUKQXd3cmIzQmxibk5vYVdaMExYTmxjblpwWTJVdGMyVnlkbWx1WnkxemFXZHVaWEpBTVRZek1UYzNPREV3TXpBZQpGdzB5TVRBNU1UWXdOelF4TkRKYUZ..."
       }
   }

   Copy to Clipboard Toggle word wrap

2. Using the config bundle secret

   1. Get the secret data:

      $ oc get secret -n quay-enterprise init-config-bundle-secret -o jsonpath='{.data}'

      Copy to Clipboard Toggle word wrap

      Sample output

      {
          "config.yaml": "RkVBVFVSRV9VU0 ... MDAwMAo="
      }

      Copy to Clipboard Toggle word wrap

   2. Decode the data:

      $ echo 'RkVBVFVSRV9VU0 ... MDAwMAo=' | base64 --decode

      Copy to Clipboard Toggle word wrap

      FEATURE_USER_INITIALIZE: true
      BROWSER_API_CALLS_XHR_ONLY: false
      SUPER_USERS:
      - quayadmin
      FEATURE_USER_CREATION: false
      FEATURE_QUOTA_MANAGEMENT: true
      FEATURE_PROXY_CACHE: true
      FEATURE_BUILD_SUPPORT: true
      DEFAULT_SYSTEM_REJECT_QUOTA_BYTES: 102400000

      Copy to Clipboard Toggle word wrap