-
Notifications
You must be signed in to change notification settings - Fork 101
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Containerized proxy - copying images to internal registry #1981
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some comments to be reviewed
It is possible to deploy containerized {productname} Proxy in an environment without an internet connection. | ||
In such case, the images are copied to an internal registry, or saved to a tar file. | ||
|
||
This procedure allows re-use of the existing minion FQDN to create a configuration to start a containerized proxy. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is not related with a proxy deployment without internet connection
modules/installation-and-upgrade/pages/containerized-proxy-wo-internet.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-wo-internet.adoc
Outdated
Show resolved
Hide resolved
The user should first register the minion to suse manager server, and then re-use the same FQDN in a generation. | ||
|
||
|
||
Make sure the default port is set up to `8022` for virtualized proxy when creating configuration using [literal]`spacecmd`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
this is not related to connected setup, but rater related to general installation.
please add also @cbosdo as a reviewer |
modules/installation-and-upgrade/pages/containerized-proxy-wo-internet.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-wo-internet.adoc
Outdated
Show resolved
Hide resolved
The product that is installed in that machine will be SUSE Manager Proxy and will not have the needed packages. | ||
Changing the base channel to have the SUSE Manager client tools can lead to package conflicts and port conflicts. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why do we need the proxy product here? I fail to understand that.
==== | ||
|
||
[[from.suma.to.internal.reg.without.ssl]] | ||
== Copy images from suse manager registry to internal registry without SSL configured |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we really want to describe without SSL configured? Shouldn't we assume they have setup their registry safely and if needed they read the skopeo
man page?
+ | ||
---- | ||
for image in httpd proxy-salt-broker squid ssh tftpd; do | ||
skopeo copy --dest-tls-verify=false docker://registry.suse.com/suse/manager/4.3/proxy-$image:latest docker://m43-registry.tf.local/4.3/proxy-$image |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should the destination registry FQDN we abstracted away? Be careful some people are blindly copy / pasting doc's commands...
done | ||
---- | ||
|
||
If the registry is unsecured (not configured with SSL), on the containerized proxy VM edit [literal]`/etc/containers/registries.conf` and add the regitry domain to the section [literal]`insecure list`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Same here... do we really want to document unsecure things?
aefbf69
to
8d87fad
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We miss the tweaks needed to use these images... but there is one thing I am not sure about and need to test to provide you the proper steps.
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Show resolved
Hide resolved
…loyment.adoc Co-authored-by: Ricardo Mateus <[email protected]>
…loyment.adoc Co-authored-by: Ricardo Mateus <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Form my side just one small change
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Added more infos after testing
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Show resolved
Hide resolved
…loyment.adoc Co-authored-by: Ricardo Mateus <[email protected]>
…loyment.adoc Co-authored-by: Cedric Bosdonnat <[email protected]>
…loyment.adoc Co-authored-by: Cedric Bosdonnat <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There is some mix and match between the two solutions. I hope I have explained clearly enough.
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Show resolved
Hide resolved
@cbosdo - final final check please :) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Many thanks for your patience!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Most proposals for consistency.
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Outdated
Show resolved
Hide resolved
…loyment.adoc Co-authored-by: Karl Eichwalder <[email protected]>
…loyment.adoc Co-authored-by: Karl Eichwalder <[email protected]>
…loyment.adoc Co-authored-by: Karl Eichwalder <[email protected]>
…loyment.adoc Co-authored-by: Karl Eichwalder <[email protected]>
…loyment.adoc Co-authored-by: Karl Eichwalder <[email protected]>
…loyment.adoc Co-authored-by: Karl Eichwalder <[email protected]>
…loyment.adoc Co-authored-by: Karl Eichwalder <[email protected]>
Many thanks for YOUR patience too @cbosdo. |
…loyment.adoc Co-authored-by: Karl Eichwalder <[email protected]>
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Show resolved
Hide resolved
modules/installation-and-upgrade/pages/containerized-proxy-deployment.adoc
Show resolved
Hide resolved
…loyment.adoc Co-authored-by: Karl Eichwalder <[email protected]>
Description
Customers may want to deploy SUMA containerized proxy in an environment without an internet connection.
To do so, they can copy the images to an internal registry or by saving the images to a tar file.
Target branches
Which documentation version does this PR apply to?
Links
Fixes https://github.com/SUSE/spacewalk/issues/19597 i.e. Confluence instructions were converted to documentation.