@@ -114,20 +114,26 @@ set -e
114
114
sudo mkfs.xfs /dev/vdc
115
115
sudo mkdir -p /opt/registry/{auth,certs,data}
116
116
sudo mount /dev/vdc /opt/registry/data
117
- sudo openssl req -newkey rsa:4096 -nodes -sha256 -keyout /opt/registry/certs/domain.key -x509 -days 1 -subj "/CN=mirror-$CLUSTER_NAME -${CONFIG_TYPE} " -addext "subjectAltName=DNS:$MIRROR_REGISTRY_DNS_NAME ,DNS:mirror-$CLUSTER_NAME -${CONFIG_TYPE} " -out /opt/registry/certs/domain.crt
117
+ openssl req -newkey rsa:4096 -nodes -sha256 -keyout domain.key -x509 -days 1 -subj "/CN=mirror-$CLUSTER_NAME -${CONFIG_TYPE} " -addext "subjectAltName=DNS:$MIRROR_REGISTRY_DNS_NAME ,DNS:mirror-$CLUSTER_NAME -${CONFIG_TYPE} " -out domain.crt
118
+ sudo cp domain.crt /opt/registry/certs/domain.crt
119
+ sudo cp domain.key /opt/registry/certs/domain.key
118
120
sudo cp /opt/registry/certs/domain.crt /etc/pki/ca-trust/source/anchors/domain.crt
119
121
sudo update-ca-trust
120
122
sudo dnf install -y podman
121
123
curl -L -o mirror-registry.tar.gz https://mirror.openshift.com/pub/cgw/mirror-registry/latest/mirror-registry-amd64.tar.gz --retry 12
122
124
tar -xzvf mirror-registry.tar.gz
123
- ./mirror-registry install --sslCert /opt/registry/certs/domain.crt --sslKey /opt/registry/certs/domain.key --quayHostname ${MIRROR_REGISTRY_DNS_NAME} --initPassword ${PASSWORD} --initUser ${USER}
125
+ echo "Running the mirror registry"
126
+ ./mirror-registry install --sslCert domain.crt --sslKey domain.key --quayHostname ${MIRROR_REGISTRY_DNS_NAME} --initPassword ${PASSWORD} --initUser ${USER} -v
127
+ echo "Finished the mirror registry"
124
128
podman login -u ${USER} -p ${PASSWORD} ${MIRROR_REGISTRY_DNS_NAME} :8443"
125
129
EOF
126
130
127
131
scp_via_proxy $WORK_DIR /deploy_mirror.sh $BASTION_USER @$mirror_ipv4 :/tmp
128
132
ssh_via_proxy " chmod +x /tmp/deploy_mirror.sh"
129
133
ssh_via_proxy " bash -c /tmp/deploy_mirror.sh"
130
134
135
+ echo " Finished running mirror"
136
+
131
137
echo " ${MIRROR_REGISTRY_DNS_NAME} :8443" > " ${SHARED_DIR} /mirror_registry_url"
132
138
scp_via_proxy $BASTION_USER @$mirror_ipv4 :/opt/registry/certs/domain.crt ${SHARED_DIR} /additional_trust_bundle
133
139
echo $mirror_ipv4 > " ${SHARED_DIR} /MIRROR_SSH_IP"
0 commit comments