-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Description
Which section(s) is the issue in?
Short overview/explanation missing and missing critical information in "Adding subscription entitlements as a build secret".
What needs fixing?
I have spend several hours trying to achieve such build and below changes I believe would make the experience much easier.
First thing is that there is no short overview what is needed to perform a subscription manager build. Something along the lines of
To build images with your subscription, you need to add subscription certificate as a secret. Also subscription manager configuration or Satellite configuration as config maps. Then copy these files in the image within the Containerfile. Please see following sections.
Then the section "Adding subscription entitlements as a build secret" needs to be more specific how to obtain the certificates. I figured I can find subscription in access.redhat.com. But there are two options to download the certificated.
One way is from subscription "Details" -> "Identity Certificate " -> Download. But this does NOT work. It causes error during build 'IdentityCertificate' object has no attribute 'key_path'
.
The other option that actually works is to go to the "Subscriptions" tab and use the "Download certificates" button which gives you a zip file. You navigate within to a pem file with proper name. Then you need to split the file to a -key.pem
file where you put only the RSA private key and the rest of the content you leave in the original file. Finally with these two files subscription manager in container works.
P.S. it is good to mention enhancement request related to this: https://github.com/openshift/enhancements/blob/master/enhancements/subscription-content/subscription-content-access.md