Skip to content

Configuring Container Registry

Endi S. Dewata edited this page Jan 18, 2023 · 10 revisions

Overview

The Continuous Delivery system can be configured to publish the container images to a container registry.

To publish to GitHub Container Registry, configure the following variable in GitHub:

  • REGISTRY with value ghcr.io

To publish to other container registry (e.g. Quay.io), configure the following variables and secrets in GitHub:

  • variables:

    • REGISTRY (e.g. quay.io)

    • REGISTRY_NAMESPACE (e.g. dogtagpki)

  • secrets:

    • REGISTRY_USERNAME (e.g. robot account name)

    • REGISTRY_PASSWORD (e.g. robot account token)

To reset the configuration simply remove the variables and secrets.

Availability: Since PKI 11.4

Creating Repository in Quay.io

  • Go to Account SettingsRepositories.

  • Click Create New Repository.

  • Enter a name for the repository (e.g. pki-dist).

  • Select Public.

  • Click Create Public Repository.

Creating Robot Account in Quay.io

  • Go to Account SettingsRobot Accounts.

  • Click Create Robot Account.

  • Enter a name for the robot account (e.g. github).

  • Click Create robot account.

  • Provide Write permissions to the relevant repositories (e.g. pki-dist).

  • Click Add permissions.

Getting Robot Account Token in Quay.io

  • Go to Account SettingsRobot Accounts.

  • Click the robot account name (e.g. dogtagpki+github).

  • Click Robot Account.

  • Copy the robot account token.

Configuring Container Registry in GitHub

  • Go to SettingsSecrets and variablesActions.

  • Click New repository secret.

  • Add REGISTRY_USERNAME and REGISTRY_PASSWORD secrets.

  • Click Variables tab.

  • Click New repository variable.

  • Add REGISTRY and REGISTRY_NAMESPACE variables.

Resetting Container Registry Configuration in GitHub

  • Go to SettingsSecrets and variablesActions.

  • Click Remove secret next to REGISTRY_USERNAME and REGISTRY_PASSWORD.

  • Click Variables tab.

  • Click Delete variable next to REGISTRY and REGISTRY_NAMESPACE.

Clone this wiki locally