Enable/Disable Local OKD/OCP4 Image Registry for External Access

Mindwatering Incorporated

Author: Tripp W Black

Created: 07/31 at 08:38 PM

 

Category:
RH OpenShift
Reference

Task


Enable or disable the local image repository to be accessible/available outside the cluster.

Note:
- The operator cluster setting enables access via the cluster default route.

Steps by oc CLI:
a. Login
$ oc login -u <myadminid> <apiendpoint>:6443
<enter password>

b. Set to true to allow external access:
$ oc patch configs.imageregistry.operator.openshift.io/cluster --patch '{"spec":{"defaultRoute":true}}' --type=merge
<confirm patched, will add (no change) if already true in the case above>

or

c. Set to false to block external access:
$ oc patch configs.imageregistry.operator.openshift.io/cluster --patch '{"spec":{"defaultRoute":true}}' --type=merge
<confirm patched, will add (no change) if already true in the case above>

d. Verify route exists (if true/enabled) or doesn't exist (if false/disabled):
$ oc get route -n openshift-image-registry
<confirm does or does not exist>


Steps by Web Console:
a. Navigate to config page:
web browser --> console-openshift-console... --> login --> Administration (left menu) --> Cluster Settings (menu option) --> ClusterOperators (tab) --> Related objects (tab) --> cluster © (configs option, there are multiple items say cluster, choose the C one) --> YAML (tab)

b. Update the specs --> defaultRoute line:
...
spec:
...
defaultRoute: false
...

c. Click Save. Click Reload.


d. Verify route exists (if true/enabled) or doesn't exist (if false/disabled):
web browser --> console-openshift-console... --> login --> Networking (left menu) --> Routes (menu option) --> filter to openshift-image-registry namespace
<confirm exists (if set true/enabled) or confirm doesn't exist (if set false/disabled)>



previous page

×