13.3. Using Red Hat Quay to proxy a remote registry

Procedure

1. On the Red Hat Quay v2 UI, click the name of an organization, for example, cache-org.
2. In the navigation pane, click Settings.

3. In the Remote Registry box, enter the name of the remote registry to be cached, for example, quay.io, and click Save.

   참고

   By adding a namespace to the Remote Registry, for example, quay.io/<namespace>, users in your organization will only be able to proxy from that namespace.

4. Optional. In the Remote Registry username box, enter the username for authenticating into the remote registry specified in the previous step. If you leave this empty, Quay will attempt to pull content anonymously from the upstream registry.
5. Optional. In the Remote registry password box, enter the password for authenticating into the remote registry. If you leave this empty, Quay will attempt to pull content anonymously from the upstream registry.

6. Optional. Set a time in the Expiration field.

   참고
   • The default tag Expiration field for cached images in a proxy organization is set to 86400 seconds. In the proxy organization, the tag expiration is refreshed to the value set in the UI’s Expiration field every time the tag is pulled. This feature is different than Quay’s default individual tag expiration feature. In a proxy organization, it is possible to override the individual tag feature. When this happens, the individual tag’s expiration is reset according to the Expiration field of the proxy organization.
   • Expired images will disappear after the allotted time, but are still stored in Red Hat Quay. The time in which an image is completely deleted, or collected, depends on the Time Machine setting of your organization. The default time for garbage collection is 14 days unless otherwise specified.
7. Optional. Check the http box if you want an unsecure protocol used. If not checked, https is used to request the remote registry.
8. Click Save.

Verification

1. On the CLI, pull a public image from the remote registry that was specified, for example, quay.io, acting as a proxy cache:

   $ podman pull <registry_url>/<organization_name>/<quayio_namespace>/<image_name>

   중요

   If your organization is set up to pull from a single namespace in the remote registry, the remote registry namespace must be omitted from the URL. For example, podman pull <registry_url>/<organization_name>/<image_name>.