13.3.2.2.4. 将 secret 数据复制到配置 YAML 中

流程

1. 在控制台 UI 中找到 Workloads Secrets 的新 secret。

2. 对于每个 secret，找到 YAML 视图：

   kind: Secret
   apiVersion: v1
   metadata:
     name: temp-crt
     namespace: quay-enterprise
     uid: a4818adb-8e21-443a-a8db-f334ace9f6d0
     resourceVersion: '9087855'
     creationTimestamp: '2022-03-28T13:05:30Z'
   ...
   data:
     extra_ca_cert_build_cluster.crt: >-
       LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURNakNDQWhxZ0F3SUJBZ0l....
   type: Opaque

   kind: Secret
   apiVersion: v1
   metadata:
     name: quay-config-ssl
     namespace: quay-enterprise
     uid: 4f5ae352-17d8-4e2d-89a2-143a3280783c
     resourceVersion: '9090567'
     creationTimestamp: '2022-03-28T13:10:34Z'
   ...
   data:
     ssl.cert: >-
       LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUVaakNDQTA2Z0F3SUJBZ0lVT...
     ssl.key: >-
       LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcFFJQkFBS0NBUUVBc...
   type: Opaque

3. 在 UI 中查找 Red Hat Quay registry 配置捆绑包的 secret，或通过运行以下命令来使用命令行：

   $ oc get quayregistries.quay.redhat.com -o jsonpath="{.items[0].spec.configBundleSecret}{'\n'}"  -n quay-enterprise

4. 在 OpenShift Container Platform 控制台中，选择配置捆绑包 secret 的 YAML 选项卡，并从您创建的两个 secret 中添加数据：

   kind: Secret
   apiVersion: v1
   metadata:
     name: init-config-bundle-secret
     namespace: quay-enterprise
     uid: 4724aca5-bff0-406a-9162-ccb1972a27c1
     resourceVersion: '4383160'
     creationTimestamp: '2022-03-22T12:35:59Z'
   ...
   data:
     config.yaml: >-
       RkVBVFVSRV9VU0VSX0lOSVRJQUxJWkU6IHRydWUKQlJ...
     extra_ca_cert_build_cluster.crt: >-
       LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURNakNDQWhxZ0F3SUJBZ0ldw....
     ssl.cert: >-
       LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUVaakNDQTA2Z0F3SUJBZ0lVT...
     ssl.key: >-
       LS0tLS1CRUdJTiBSU0EgUFJJVkFURSBLRVktLS0tLQpNSUlFcFFJQkFBS0NBUUVBc...
   type: Opaque

5. 点击 Save。

6. 输入以下命令查看您的 pod 是否重启：

   $ oc get pods -n quay-enterprise

   输出示例

   NAME                                                   READY   STATUS              RESTARTS   AGE
   ...
   example-registry-quay-app-6786987b99-vgg2v             0/1     ContainerCreating   0          2s
   example-registry-quay-app-7975d4889f-q7tvl             1/1     Running             0          5d21h
   example-registry-quay-app-7975d4889f-zn8bb             1/1     Running             0          5d21h
   example-registry-quay-app-upgrade-lswsn                0/1     Completed           0          6d1h
   example-registry-quay-config-editor-77847fc4f5-nsbbv   0/1     ContainerCreating   0          2s
   example-registry-quay-config-editor-c6c4d9ccd-2mwg2    1/1     Running             0          5d21h
   example-registry-quay-database-66969cd859-n2ssm        1/1     Running             0          6d1h
   example-registry-quay-mirror-764d7b68d9-jmlkk          1/1     Terminating         0          5d21h
   example-registry-quay-mirror-764d7b68d9-jqzwg          1/1     Terminating         0          5d21h
   example-registry-quay-redis-7cc5f6c977-956g8           1/1     Running             0          5d21h

7. 重新配置 Red Hat Quay registry 后，输入以下命令检查 Red Hat Quay 应用程序 pod 是否正在运行：

   $ oc get pods -n quay-enterprise

   输出示例

   example-registry-quay-app-6786987b99-sz6kb             1/1     Running            0          7m45s
   example-registry-quay-app-6786987b99-vgg2v             1/1     Running            0          9m1s
   example-registry-quay-app-upgrade-lswsn                0/1     Completed          0          6d1h
   example-registry-quay-config-editor-77847fc4f5-nsbbv   1/1     Running            0          9m1s
   example-registry-quay-database-66969cd859-n2ssm        1/1     Running            0          6d1h
   example-registry-quay-mirror-758fc68ff7-5wxlp          1/1     Running            0          8m29s
   example-registry-quay-mirror-758fc68ff7-lbl82          1/1     Running            0          8m29s
   example-registry-quay-redis-7cc5f6c977-956g8           1/1     Running            0          5d21h

8. 在您的浏览器中，访问 registry 端点并验证证书是否已适当更新。例如：

   Common Name (CN)	example-registry-quay-quay-enterprise.apps.docs.quayteam.org
   Organisation (O)	DOCS
   Organisational Unit (OU)	QUAY